# Does Splunk have an MCP server?

**Yes — Official.** Splunk maintains an official MCP server.

> Distributed as an official Splunkbase app; the splunk GitHub org's MCP repo labels itself unofficial, and the leading community repo archived itself in favor of the official app.

## Facts

- Verdict: Official (Yes)
- Access: Built into the product — Ships inside the vendor's own app or CLI rather than as a standalone download.
- Endpoint: `Splunkbase app 7931 — in-product`
- Category: [Monitoring](https://mcpyet.com/category/monitoring/)
- Verified against vendor docs: 2026-08-10
- GitHub data refreshed: 2026-08-11 (re-checked every 6 hours)

## The receipts

- **In-product:** Splunkbase app 7931 — in-product — ships inside Splunk's own product rather than as a standalone server. Documented at <https://help.splunk.com/en/splunk-cloud-platform/mcp-server-for-splunk-platform/1.1/about-mcp-server-for-splunk-platform>.

## How to connect it

Ships inside the vendor's own app or CLI rather than as a standalone download.

### Claude Code

```sh
claude mcp add splunk -- npx -y <package-from-readme>
```

Swap in the exact package and flags from the repo README — most servers need an API key passed as an environment variable. Add `--scope user` to make it available in every project.

### Claude Desktop

Open **Settings → Developer → Edit Config** and add the server to `claude_desktop_config.json`, then restart Claude Desktop:

```json
{
  "mcpServers": {
    "splunk": {
      "command": "npx",
      "args": [
        "-y",
        "<package-from-readme>"
      ],
      "env": {
        "API_KEY": "…"
      }
    }
  }
}
```

### Cursor

Add to `.cursor/mcp.json` in your project, or `~/.cursor/mcp.json` for every project:

```json
{
  "mcpServers": {
    "splunk": {
      "command": "npx",
      "args": [
        "-y",
        "<package-from-readme>"
      ],
      "env": {
        "API_KEY": "…"
      }
    }
  }
}
```

### VS Code

Add to `.vscode/mcp.json`, then pick the server from Copilot's agent-mode tools menu:

```json
{
  "servers": {
    "splunk": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "<package-from-readme>"
      ]
    }
  }
}
```

### ChatGPT

ChatGPT connects to **remote servers only**, and this one runs on your machine. Either expose it through an MCP gateway that gives it a public URL, or use a client with native local support (Claude or Cursor).

## How we know

Official MCP Server for Splunk Enterprise and Cloud (v1.1), distributed as Splunkbase app 7931 and documented on help.splunk.com — SPL queries, NL-to-SPL, RBAC.

- GitHub data refreshed 2026-08-11, then every 6 hours.
- Vendor docs verified on 2026-08-10.
- Corrections: hello@mcpyet.com.

## Also in Monitoring

- [Datadog](https://mcpyet.com/mcp/datadog.md) — Official (Yes)
- [Grafana](https://mcpyet.com/mcp/grafana.md) — Official (Yes)
- [Sentry](https://mcpyet.com/mcp/sentry.md) — Official (Yes)

---

Source: https://mcpyet.com/mcp/splunk/ — data refreshed 2026-08-11