Mcp Server Splunk — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server Splunk (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Search and manage Splunk from Pi, Claude Code, and Codex using MCP.
Install uv, then run one of these Bash examples. Replace localhost with your Splunk hostname.
Token:
export SPLUNK_HOST=localhost
read -rsp 'Splunk token: ' SPLUNK_TOKEN; echo
export SPLUNK_TOKENCreate a token in Splunk Web: Settings → Tokens → New Token.
Or username/password:
export SPLUNK_HOST=localhost
unset SPLUNK_TOKEN
export SPLUNK_USERNAME=your-username
read -rsp 'Splunk password: ' SPLUNK_PASSWORD; echo
export SPLUNK_PASSWORDLaunch your client from the same terminal. Restart it if it is already running.
pi mcp add splunk -- uvx mcp-server-splunk@latest
pi mcp list
piclaude mcp add --transport stdio --scope user splunk -- uvx mcp-server-splunk@latest
claude mcp list
claudeAdd to ~/.codex/config.toml:
[mcp_servers.splunk]
command = "uvx"
args = ["mcp-server-splunk@latest"]
env_vars = [
"SPLUNK_HOST", "SPLUNK_PORT", "SPLUNK_SCHEME",
"SPLUNK_TOKEN", "SPLUNK_USERNAME", "SPLUNK_PASSWORD",
]codex mcp list
codex| Variable | Default | Purpose |
|---|---|---|
SPLUNK_HOST | localhost | Splunk hostname, without scheme or port |
SPLUNK_PORT | 8089 | Management API port |
SPLUNK_SCHEME | https | http or https |
SPLUNK_TOKEN | — | Authentication token |
SPLUNK_USERNAME | — | Username when not using a token |
SPLUNK_PASSWORD | — | Password when not using a token |
Use a token or username/password. A token takes precedence if both are set. The server does not load .env files automatically.
91 tools cover searches, indexes, alerts, saved searches, dashboards, lookups, macros, KV Store, inputs, users, roles, apps, and server administration. See tool definitions for parameters and behavior.
Some tools modify or delete Splunk resources. Use an account with only the permissions you need.
With connection variables set as above:
git clone https://github.com/pahar0/mcp-server-splunk.git
cd mcp-server-splunk
uv sync
uv run mcp-server-splunk~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.