How to Install Splunk MCP in Claude Desktop
Official Splunk integration — query observability data, alerts, and incident context through AI
What Splunk MCP does
The official Splunk MCP server gives AI agents access to observability and security data stored in Splunk. It can search logs, inspect alerts, and correlate incidents with operational data. Features: - Run Splunk queries and retrieve event results - Inspect logs, metrics, and traces across services - Access alert and incident timelines - Search dashboards and saved searches - Manage Splunk apps and data inputs - Correlate security and operational events Splunk MCP is ideal for SRE and SecOps teams that need AI to triage incidents and surface root causes from large datasets.
Installation steps
- 1Copy the config below
- 2Open claude_desktop_config.json
- 3Paste inside "mcpServers": {}
- 4Restart Claude Desktop
Configuration
File location: ~/Library/Application Support/Claude/claude_desktop_config.json
{
"splunkMcp": {
"command": "npx",
"args": [
"-y",
"@splunk/mcp"
],
"env": {
"SPLUNK_HEC_URL": "https://instance.splunkcloud.com",
"SPLUNK_TOKEN": "..."
}
}
}Install in other clients
For maintainers
If you maintain Splunk MCP, add this badge to your README to show it's verified on CuratedMCP:
[](https://curatedmcp.com/marketplace/splunk-mcp)
Related servers
Grafana MCP
Official Grafana integration — query dashboards, explore metrics, and manage alerts via AI
Vercel MCP
Official Vercel integration — manage deployments, logs, env vars, and projects from your AI agent
Sentry MCP
Official Sentry integration — bring live error context, stack traces, and performance data into your AI