Splunk Intelligence MCP Server

Item: Splunk Intelligence MCP Server
Rating: 54
Author: M8ven

Enables AI agents to investigate Splunk exports or live queries using deterministic detectors and an iterative analysis loop, all running locally without data leaving the machine.

→ debaditya-mohankudo/splunk-intelligence · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — splunk__lsp_call_chain (line 363: rg = subprocess.run(rg_cmd, capture_output=True, text=True, timeout=10))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configSPLUNK_INDEX

configSPLUNK_INVESTIGATOR_MAX_ITER

configSPLUNK_SPIKE_WINDOW— 60 Spike detection window (seconds)

configSPLUNK_SPIKE_THRESHOLD— 10 Events/window to trigger a spike

configSPLUNK_CORRELATE_WINDOW

configSPLUNK_AUTH_PATH— ~/.splunk/auth.json Cookie persist path

configSPLUNK_COOKIE_NAME— splunkd_8089 Splunk session cookie name

configSPLUNK_URL— Splunk instance URL (set env var; required for live queries only)

configSPLUNK_POLL_INTERVAL

configSPLUNK_POLL_TIMEOUT

configSPLUNK_MAX_REAUTH

configLOG_LEVEL— DEBUG Log verbosity

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/debaditya-mohankudo-splunk-intelligence-1ilum0)](https://m8ven.ai/mcp/debaditya-mohankudo-splunk-intelligence-1ilum0)

commit: b61d11a26dd2ed2dd4160ac93dacb0b61da41aec

code hash: f30c4b016992811f4804e39ce61b27a3070c8e4eb5ac8fa6e69abe72aa89785c

verified: 6/29/2026, 11:17:23 AM

view raw JSON →