Title: Elastic Agent Builder MCP server | Elastic Docs
URL Source: https://www.elastic.co/docs/explore-analyze/ai-features/agent-builder/mcp-server
Markdown Content:
The Forrester Wave™: XDR Platforms, Q2 2026
Access report
About usPartnersSupport|Login
Elasticsearch for...
* ###### [Context engineering Get the most relevant context to agents so that they deliver accurate and trusted outcomes](https://www.elastic.co/elasticsearch/context-engineering)
* ###### [Vector database Efficiently create, store, and search vector embeddings](https://www.elastic.co/elasticsearch/vector-database)
* ###### [Search powered applications The speed, scale, and flexibility to power modern application experience](https://www.elastic.co/enterprise-search/search-applications)
* ###### [Logs Collect, search, explore, and act on large volumes](https://www.elastic.co/observability/log-monitoring)
* ###### [Threat protection Detect, investigate, and remediate cyber threats at scale on real-time data](https://www.elastic.co/security/investigation-response)
* ###### [Workflows Combine scripted automation with AI reasoning natively in Elasticsearch](https://www.elastic.co/elasticsearch/workflows)
Elasticsearch components
* ###### [Elasticsearch A distributed, RESTful search and analytics engine](https://www.elastic.co/elasticsearch)
* ###### [Kibana (Discover, Dashboards) Explore, visualize, and build dashboards using data stored in Elasticsearch](https://www.elastic.co/kibana)
* ###### [Elastic Agent Builder Build context-aware agents faster that incorporate all your data and deliver best-in-class relevance.](https://www.elastic.co/elasticsearch/agent-builder)
* ###### [AutoOps Easy cluster management with performance recommendations, resource utilization, and cost insights](https://www.elastic.co/platform/autoops)
* ###### [Piped query language Simplify workflows and accelerate query response for efficient data processing](https://www.elastic.co/elasticsearch/piped-query-language)
* ###### [Jina AI search models Jina AI is part of Elastic, bringing best-in-class models for embeddings, rerankers, and URL and doc extraction](https://www.elastic.co/jina-search-models)
Deployment options
* ###### [Elastic Cloud Serverless Zero operational load so that you can build faster](https://www.elastic.co/cloud/serverless?pg=global&plcmt=nav&cta=205352-serverless-title)[Start free trial](https://cloud.elastic.co/serverless-registration?pg=global&plcmt=nav&cta=205352-serverless)
* ###### [Elastic Cloud Hosted Deploy and scale on any cloud in minutes with ultimate control](https://www.elastic.co/cloud?pg=global&plcmt=nav&cta=205352-hosted-title)[Start free trial](https://cloud.elastic.co/registration?pg=global&plcmt=nav&cta=205352-hosted)
* ###### [Self-managed Elasticsearch Run locally, via Kubernetes, or your own orchestration](https://www.elastic.co/downloads/elasticsearch?pg=global&plcmt=nav&cta=205352-title)[Download](https://www.elastic.co/downloads/elasticsearch?pg=global&plcmt=nav&cta=205352)
Search
* ###### [Ecommerce search Improve customers' search experience and drive conversion](https://www.elastic.co/enterprise-search/ecommerce)
* ###### [Customer support search Help customers find support information quickly and easily](https://www.elastic.co/enterprise-search/customer-support)
* ###### [Search-driven apps Create engaging apps quickly and easily with Elasticsearch](https://www.elastic.co/enterprise-search/site-search)
Overview
Observability
* ###### [Log analytics Centralize and analyze logs using Search AI to detect, investigate, and remediate incidents](https://www.elastic.co/observability/log-monitoring)
* ###### [Infrastructure monitoring Monitor, visualize, and analyze the health of your on-premises and cloud infrastructure](https://www.elastic.co/observability/infrastructure-monitoring)
* ###### [Digital experience monitoring Improve users' experience with real user monitoring (RUM), synthetic testing, and uptime monitoring](https://www.elastic.co/observability/digital-experience-monitoring)
* ###### [App performance monitoring Monitor, visualize, and analyze the performance and availability of your applications](https://www.elastic.co/observability/application-performance-monitoring)
* ###### [AIOps Automatically detect, diagnose, and resolve issues faster with GenAl and ML](https://www.elastic.co/observability/aiops)
* ###### [LLM observability Monitor and optimize LLM performance, cost, safety, and reliability](https://www.elastic.co/observability/llm-monitoring)
Overview
Security
* ###### [Next-gen SIEM Detect, investigate, and respond to evolving threats with Al-driven security analytics](https://www.elastic.co/security/siem)
* ###### [Agentic SOAR Automate alert triage, enrichment, and response natively with Elastic Workflows, no separate SOAR required](https://www.elastic.co/security/soar)
* ###### [XDR and endpoint security Secure your endpoints, clouds, and containers with AI-driven insights](https://www.elastic.co/security/xdr)
* ###### [AI for security Automate your triage, investigation, and response workflows with Search AI](https://www.elastic.co/security/ai)
Overview
Why Elastic?
* ###### [10x your data's value Learn how you can tap into your underutilized data with Search AI](https://www.elastic.co/search-ai?plcmt=nav&cta=205352)
Knowledge Hub
Industry
Financial servicesManufacturingPublic sectorRetailTelecommunicationsView all industries
Better together
* ###### [Cloud providers Deploy with your favorite cloud marketplace: AWS, Azure, or Google Cloud](https://www.elastic.co/partners/cloud-marketplace)
* ###### [Elastic AI Ecosystem Use Elastic with built-in integrations with leading Al technology providers](https://www.elastic.co/partners/ai-ecosystem)
* ###### [Search AI Partner Program Partner with Elastic so we can find the answers, together](https://www.elastic.co/partners)
Accolades
* ###### [AV-Comparatives Elastic successfully blocks 100% of malware encountered in AV-Comparatives testing](https://www.elastic.co/resources/security/av-comparatives-business-security-test)
* ###### [Forrester Wave™ XDR Strong Performer in The Forrester Wave™: XDR Platforms, Q2 2026](https://www.elastic.co/resources/security/report/forrester-xdr-wave)
* ###### [Gartner Magic Quadrant Leader A Leader in 2026 Gartner® Magic Quadrant™ for Observability Platforms](https://www.elastic.co/resources/observability/analyst-report/gartner-magic-quadrant-observability-platforms?plcmt=en-nav&cta=261204)
* ###### [IDC MarketScape Leader in the 2026 SIEM Assessment](https://www.elastic.co/resources/security/report/idc-analyst-siem-marketspace-report)
Customers
View all customers stories
Launch
* ###### [Get started Follow along with beginner guides for each solution](https://www.elastic.co/getting-started)
* ###### [Demo gallery Play in our hands-on sandbox and watch how-to videos](https://www.elastic.co/demo-gallery)
* ###### [Downloads Download Elasticsearch now to get started for free](https://www.elastic.co/downloads)
* ###### [Integrations Easily connect Elasticsearch to all the systems that matter](https://www.elastic.co/integrations/data-integrations)
Learn
* ###### [Docs Learn how to use all of Elastic's products and features](https://www.elastic.co/docs)
* ###### [Elasticsearch Labs Learn how to build with the latest features and abilities](https://www.elastic.co/search-labs)
* ###### [Elastic Security Labs Understand the threat horizon and see the latest research](https://www.elastic.co/security-labs)
* ###### [Elastic Observability Labs Explore what's next in monitoring and metric trends](https://www.elastic.co/observability-labs)
* ###### [Blog Read all of the latest company news from Elastic's blog](https://www.elastic.co/blog)
Connect
* ###### [Community Join our community of developers on Slack, GitHub, and more](https://www.elastic.co/community)
* ###### [Events Attend your local meetups, workshops, and Elastic{ON}](https://www.elastic.co/events)
* ###### [Webinars Check out Elastic webinars and learn directly from our experts](https://www.elastic.co/events/?tab=1&event=Webinars)
* ###### [Discuss Share tips, ask questions, and learn from other developers](https://discuss.elastic.co/)
Get help
* ###### [Training Learn Elastic for free and expand your skills with our courses](https://www.elastic.co/training)
* ###### [Support Get expert advice on your Elasticsearch deployments for fast resolution](https://www.elastic.co/support)
* ###### [Consulting Drive success with custom support and consulting services](https://www.elastic.co/consulting)
PricingDocs
Search
Start free trialContact sales
Docs
- Docs/
- Explore and analyze/
- AI-powered features/
- Agent Builder/
- Programmatic access
Elastic Agent Builder MCP server
Serverless Elasticsearch
Serverless Observability
Serverless Security
Stack GA 9.3+
The Model Context Protocol (MCP) server provides a standardized interface for external MCP hosts to access Elastic Agent Builder tools. For example, you can run an ES|QL query against your data from Claude Desktop without opening Kibana.
Note
On this page, Elastic Agent Builder acts as the MCP server: external MCP hosts connect to it to use your Elastic Agent Builder tools. To instead let your agents use tools hosted on an external MCP server, refer to Model Context Protocol (MCP) tools in Elastic Agent Builder.
The MCP server is available at the following endpoint:
{KIBANA_URL}/api/agent_builder/mcp
When using a custom Kibana Space, include the space name in the endpoint path:
{KIBANA_URL}/s/{SPACE_NAME}/api/agent_builder/mcp
Tip
You can copy your MCP server URL directly in the Tools GUI. Refer to MCP server access in the Tools GUI.
External MCP hosts need credentials to reach the MCP server endpoint. The way that you configure your MCP server depends on your authentication method. Choose API keys or OAuth 2.1 based on your deployment type and use case.
Use one of the following authentication paths:
The following table compares the two paths.
| Consideration | API key | OAuth |
|---|
| Supported platforms | Elastic Stack deployments and Serverless projects | Serverless projects only Serverless |
| Best for | Automation, unattended access, and shared machine-to-machine use | Interactive MCP hosts acting on behalf of a person (Claude Desktop, Cursor), including teams that share one client |
| Multi-user access | One shared key means one shared identity; all callers act with the same permissions | One client registration serves many users. Each person consents separately and gets their own connection, acting with their own permissions and revocable individually |
| Identity | The key's snapshotted permissions | The consenting user; permissions are the user's live permissions in the project |
| Credential lifetime | Long-lived until the key expires or is revoked | Short-lived tokens, refreshed automatically unless revoked. Require a new connection if unused for 30+ days. |
| Setup | Generate a key and add it to the host configuration | Register an MCP client, then consent in the browser |
| Elastic Agent Builder tools through MCP | Full tool catalog, including Elastic Workflows | Full tool catalog, limited by the permissions |
Serverless Preview
Stack Unavailable
When you have projects linked through cross-project search, tool calls use the default cross-project search scope for the space in the MCP URL. Requests without /s/<space-name> use the default space.
Previous A2A server
Next API key authentication
v9.0+ (Current)
Get started free
- 14-day free trial
- All features included
- No setup required
On this page
Explore and analyze
© 2026 Elasticsearch B.V. All Rights Reserved.
This content is available in different formats for convenience only. All original licensing terms apply.
Elasticsearch is a trademark of Elasticsearch B.V., registered in the U.S. and in other countries. Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.