Kibana

About

Kibana provides a Model Context Protocol (MCP) server implementation designed to facilitate interaction between AI assistants and Kibana Security alerts. It exposes tools for tagging alerts, adjusting alert statuses, and fetching recent alerts, enhancing security operations workflows. The server is configured via environment variables, supporting both API key and username/password authentication for connecting to Kibana instances.

Key Features

• Adjust the status of Kibana security alerts (open, acknowledged, closed).
• Supports API key and Username/Password authentication for Kibana.
• 3 GitHub stars
• Tag specific Kibana security alerts.
• Fetch recent Kibana security alerts, with optional filtering by text and limit.
• Includes a local development and testing environment with Docker Compose.

Use Cases

• Automating alert triage processes using AI assistants.
• Enabling natural language interaction with Kibana Security alerts.
• Integrating Kibana security data into AI-powered security workflows.