Mcp Server Splunk — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server Splunk (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol server for Splunk. Enables AI assistants like Claude to search, manage, and analyze data in Splunk instances.
Add to your Claude Desktop config:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"splunk": {
"command": "uvx",
"args": ["mcp-server-splunk"],
"env": {
"SPLUNK_HOST": "your-splunk-host",
"SPLUNK_TOKEN": "your-token"
}
}
}
}claude mcp add splunk -- uvx mcp-server-splunk \
-e SPLUNK_HOST=your-splunk-host \
-e SPLUNK_TOKEN=your-tokenAdd to ~/.codex/config.toml:
[mcp_servers.splunk]
command = "uvx"
args = ["mcp-server-splunk"]
[mcp_servers.splunk.env]
SPLUNK_HOST = "your-splunk-host"
SPLUNK_TOKEN = "your-token"Add to your OpenCode config:
mcp:
splunk:
type: local
command: uvx mcp-server-splunk
env:
SPLUNK_HOST: your-splunk-host
SPLUNK_TOKEN: your-token| Variable | Required | Default | Description |
|---|---|---|---|
SPLUNK_HOST | Yes | localhost | Splunk server hostname |
SPLUNK_PORT | No | 8089 | Splunk management port |
SPLUNK_SCHEME | No | https | Connection scheme (http/https) |
SPLUNK_TOKEN | * | - | Authentication token (recommended) |
SPLUNK_USERNAME | * | - | Username (if not using token) |
SPLUNK_PASSWORD | * | - | Password (if not using token) |
*Provide either SPLUNK_TOKEN or both SPLUNK_USERNAME and SPLUNK_PASSWORD.
search_splunk - Execute SPL queriessearch_async - Non-blocking searchessearch_realtime - Real-time streamingexport_search_results - Export to filerun_saved_search - Execute saved searcheslist_indexes / get_index_infocreate_index / update_index / delete_indexsend_event - Ingest eventslist_alerts / create_alert / update_alert / delete_alertget_alert_historylist_saved_searches / get_saved_search / run_saved_searchcreate_saved_search / update_saved_search / delete_saved_searchlist_dashboards / get_dashboard / create_dashboard / delete_dashboardlist_lookups / get_lookup_data / update_lookup_datalist_macros / get_macro / create_macro / update_macro / delete_macrolist_field_extractions / get_field_summarylist_kvstore_collections / create_kvstore_collection / delete_kvstore_collectionquery_kvstore_collection / insert_kvstore_data / update_kvstore_data / delete_kvstore_datalist_inputs / get_input_infocreate_monitor_input / delete_inputlist_users / get_user_info / create_user / update_user / delete_userlist_roles / get_role_info / create_role / update_role / delete_rolelist_apps / create_app / update_app / delete_appget_server_info / get_server_settingscheck_restart_required / restart_splunk / refresh_splunklist_jobs / get_job_status / get_job_results / cancel_job# Clone and install
git clone https://github.com/pahar0/mcp-server-splunk.git
cd mcp-server-splunk
uv sync
# Run locally
export SPLUNK_HOST=localhost SPLUNK_TOKEN=your-token
uv run mcp-server-splunk
# Debug with MCP Inspector
npx @modelcontextprotocol/inspector uv run mcp-server-splunkApache 2.0
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.