Back to Home
rakeshpc icon

Splunk_MCP_Server

by rakeshpc

Overview

A web-based interface for managing Splunk indexes with a modern UI.

Installation

Run Command
python app.py

Environment Variables

  • SPLUNK_HOST
  • SPLUNK_PORT
  • SPLUNK_USERNAME
  • SPLUNK_PASSWORD
  • MCP_USERNAME
  • MCP_PASSWORD
  • FLASK_SECRET_KEY

Security Notes

CRITICAL: The application explicitly uses `ssl._create_unverified_context()` for connecting to Splunk, which disables SSL certificate validation. This makes the connection highly vulnerable to Man-in-the-Middle attacks, especially in production environments. Additionally, default hardcoded credentials for both the MCP console (mcpadmin/mcpadmin123) and Splunk (admin/changeme) are present in `app.py` if environment variables are not set, posing a significant security risk. The Flask `SECRET_KEY` also has a weak default. Console authentication is a basic username/password comparison without advanced security features.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassLow
Stars0
Forks0
Last Update2026-01-17

Tags

SplunkFlaskWeb UIIndex ManagementPython