MoreAI.tools
S
Splunk MCP
41
Stack Score
Editorial pick✓ Verified workingMCP server
Splunk MCP logo

Splunk MCP

Search + alert + dashboard ops in Splunk.

Try Splunk MCP

Best for

Best for security + ops teams running Splunk as SIEM or observability.

At a glance

Pricing
open-source
Setup time
30 minutes
Learning curve
steep
Last verified
5/25/2026

What we love

  • Splunk-maintained
  • Strong for enterprise SIEM use cases
  • Wide deployment

Where it falls short

  • SPL learning curve
  • License cost can be steep
  • Best with security-team approval

Pricing

✓ Pricing verified Jun 14, 2026

1 tier

Open-source

$0

perpetual

  • Apache 2.0

Overview

MCP server for Splunk Enterprise + Cloud — SPL search, alert mgmt, saved searches, dashboard ops. Splunk REST API token.

Key features

  • SPL search
  • Alert + saved searches
  • Dashboard ops
  • Index inspection
  • REST API

Best use cases

SIEM investigation

Let Claude pull and analyze Splunk events during security investigations.

Saved-search mgmt

Maintain and update Splunk saved searches from chat.

Integrations

Splunk Enterprise
Splunk Cloud
PagerDuty
Slack

One AI Stack pick every week.

The tool we’d pay for this week, why we’d pay for it, and what we’d skip. No promo spam.