elasticsearch7-mcp (agrica/elasticsearch7-mcp) is an MCP server listed on the M8ven Trust Index. M8ven has not graded it: we have no way to read this server ourselves. The publisher has proved control of what we score (Verified Publisher). It is connected through the M8ven GitHub App, so the listing is re-checked on every push.

Emerging

89/100

4 days ago

elasticsearch7-mcp

Item: elasticsearch7-mcp
Rating: 89
Author: M8ven

Enables MCP clients to connect to and interact with Elasticsearch 7.x clusters through natural language, supporting search, indexing, mappings, templates, cluster health, and optional diagnostic or destructive tools.

→ agrica/elasticsearch7-mcp · listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored

Monitored 5 days · every push re-verified

Who stands behind it

groupagrica.com (@agrica) · Verified Publisher

Source: Glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

34 tools verified — handlers match their declared behaviour

25 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 5 credentials: API_KEY, ES_API_KEY, ES_OAUTH_CLIENT_SECRET, ES_PASSWORD, PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

Are you the publisher? Confirm or correct these findings.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

🔐 secretAPI_KEYES_API_KEY Elasticsearch API key for authentication (also supports legacy ) No

configCA_CERTES_CA_CERT Path to custom CA certificate for Elasticsearch SSL/TLS (also supports legacy ) No

configES_ADMIN_TOOLS## =true — diagnostics (read-only)

configES_ALLOW_DESTRUCTIVE## =true — irreversible

🔐 secretES_API_KEYEvery example below sets ES_HOST and . Swap in

configES_CA_CERTPath to custom CA certificate for Elasticsearch SSL/TLS (also supports legacy CA_CERT) No

configES_ECS_INDEX_PATTERNThey need , which has no default: the server refuses to

configES_ECS_TOOLS## =true — ECS log search (read-only)

configES_HOSTEvery example below sets and ES_API_KEY. Swap in

configES_INSTANCE_LABELthe diagnostic tools, and set when more than one instance is

configES_MAX_RESULT_BYTESCeiling on one tool result. Default 32768. Past it, detail is omitted and the result says so. No

configES_MAX_RETRIESRetries per request. Default 3; 0 disables them. No

configES_OAUTH_AUDIENCEAudience to request. Auth0 needs it to issue a JWT; Keycloak and Azure AD use ES_OAUTH_SCOPE instead. No

configES_OAUTH_AUTH_STYLEpost (default) sends the credentials in the form body; basic sends them in an HTTP Basic header. No

configES_OAUTH_CLIENT_IDOAuth2 client id. Required once ES_OAUTH_TOKEN_URL is set. No

🔐 secretES_OAUTH_CLIENT_SECRETOAuth2 client secret. Required once ES_OAUTH_TOKEN_URL is set, unless the _FILE form is used. No

configES_OAUTH_CLIENT_SECRET_FILEPath to a file holding the secret, for a mounted Docker secret. Read and trimmed at startup. No

configES_OAUTH_SCOPEScope to request, if the provider needs one. No

configES_OAUTH_TOKEN_URLOAuth2 token endpoint. Setting it turns on OAuth2, which then takes precedence over the API key and basic auth. Must be https:// (plain http:// is accepted only for localhost). No

🔐 secretES_PASSWORDES_USERNAME/ for basic auth or the ES_OAUTH_ variables for

configES_REQUEST_TIMEOUTPer-request timeout in milliseconds. Default 30000 — raise it if aggregations over many indices time out. No

configES_USERNAME/ES_PASSWORD for basic auth or the ES_OAUTH_ variables for

configHOSTYes

🔐 secretPASSWORDES_PASSWORD Elasticsearch password for basic authentication (also supports legacy ) No

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/agrica-elasticsearch7-mcp-1yus5i)](https://m8ven.ai/mcp/agrica-elasticsearch7-mcp-1yus5i)

Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.

commit: 2f4d3233f012da1f4ebba525a5e98bc46fea7d50

code hash: e1d51d5e801a352f2fce3e939b3d46720a888171b8d1e1cd6b9a0c35cce1d303

verified: 9/3/2026, 11:01:34 AM

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client