opensearch-mcp-server-py (opensearch-project/opensearch-mcp-server-py) is an MCP server listed on the M8ven Trust Index. It scores 75 out of 100, grade B. It declares 2 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
B
Limited view
75/100
1 month ago

opensearch-mcp-server-py

MCP server for OpenSearch that enables AI assistants to interact with OpenSearch clusters through a standardized interface for search, index management, and cluster operations.

→ opensearch-project/opensearch-mcp-server-py· listed on glama

Limited view. Automated analysis covers part of this stack. Findings reflect what we verified. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

Limited view: static analysis for Python is partially covered.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

opensearch-project

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: OPENSEARCH_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configOPENSEARCH_ENABLED_CATEGORIESObservability tools are grouped under the observability category and can be enabled using =observability or by adding enabled_categories: [observability] to the config file.
configOPENSEARCH_DISABLED_CATEGORIESCore tools are grouped under the core_tools category and can be disabled at once using =core_tools. Avoid creating custom categories with this name as they will override the built-in category.
configOPENSEARCH_DYNAMIC_CONNECTION
configOPENSEARCH_URLopensearch_url string OpenSearch endpoint URL. Overrides .
configOPENSEARCH_MEMORY_MONITOR_INTERVAL
configOPENSEARCH_MEMORY_CONTAINER_IDmemory_container_id (auto-populated): The ID of the memory container where the session will be created. Automatically set when configured via agentic_memory config or env var. (Path Parameter)
configMEMORY_INDEX_NAME
configMEMORY_USER_ID
configMEMORY_AGENT_ID
configAWS_PROFILEaws_profile string AWS profile name. Overrides .
configAWS_OPENSEARCH_DOMAIN_NAME
configAWS_OPENSEARCH_COLLECTION_ID
configMEMORY_TOOLS_ENABLEDMemory Tools () Agentic Memory Tools (agentic_memory category)
configAWS_OPENSEARCH_SERVERLESSaws_opensearch_serverless boolean Use OpenSearch Serverless. Overrides .
configAWS_REGIONaws_region string AWS region. Overrides .
configOPENSEARCH_SETTINGS_ALLOW_WRITE
configOPENSEARCH_ENABLED_TOOLS
configOPENSEARCH_DISABLED_TOOLS
configOPENSEARCH_TOOL_CATEGORIES
configOPENSEARCH_ENABLED_TOOLS_REGEX
configOPENSEARCH_DISABLED_TOOLS_REGEX
configOPENSEARCH_SETTINGS_ALLOW_WRITE_CATEGORIES
configOPENSEARCH_HEADER_AUTH
configOPENSEARCH_SSL_VERIFYopensearch_ssl_verify boolean Set true to require SSL certificate verification. A false value is ignored, since only may disable it.
configOPENSEARCH_SSRF_GUARD
configOPENSEARCH_ALLOW_AMBIENT_AWS_FALLBACK
configOPENSEARCH_USERNAMEopensearch_username string Username for basic auth. Overrides .
🔐 secretOPENSEARCH_PASSWORDopensearch_password string Password for basic auth. Overrides .
configOPENSEARCH_NO_AUTHopensearch_no_auth boolean Connect without authentication. Overrides .
configAWS_IAM_ARNaws_iam_arn string IAM role ARN. Overrides .
configOPENSEARCH_TIMEOUTopensearch_timeout integer Connection timeout in seconds. Overrides .
configOPENSEARCH_MAX_RESPONSE_SIZE
configOPENSEARCH_QUERY_TIMEOUT
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

2/2 tools missing one or more hints — dynamic_tool_58 (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); dynamic_tool_67 (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint). OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tests exist

No test files found

Add tests that exercise each declared tool.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/opensearch-project/opensearch-mcp-server-py)](https://m8ven.ai/mcp/opensearch-project/opensearch-mcp-server-py)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: fa6c8e67e4b387801dd49c1e54745d7269203809
code hash: 6a4f1ae88f4180867f86c3c3d9baee3e8e9c85eba4b9e7c8dd394430a3caa5e4
verified: 8/7/2026, 2:44:30 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client