opensearch-mcp-server 2.0.10__tar.gz → 2.0.11__tar.gz

{opensearch_mcp_server-2.0.10 → opensearch_mcp_server-2.0.11}/CONTRIBUTING.md

@@ -73,4 +73,12 @@ If you have already created a branch and want to keep it in sync with the upstre
 git checkout <branch-name>
 git fetch upstream
 git rebase upstream/main
+```
+
+## Release
+
+```bash
+uv sync
+source .venv/bin/activate
+make release version=<RELEASE_VERSION>
 ```

{opensearch_mcp_server-2.0.10 → opensearch_mcp_server-2.0.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: opensearch-mcp-server
-Version: 2.0.10
+Version: 2.0.11
 Summary: MCP Server for interacting with Elasticsearch and OpenSearch
 License:                                  Apache License
                                    Version 2.0, January 2004
@@ -218,10 +218,10 @@ Description-Content-Type: text/markdown
 
 # Elasticsearch/OpenSearch MCP Server
 
-[![smithery badge](https://smithery.ai/badge/elasticsearch-mcp-server)](https://smithery.ai/server/elasticsearch-mcp-server)
-
 [![MseeP.ai Security Assessment Badge](https://mseep.net/pr/cr7258-elasticsearch-mcp-server-badge.png)](https://mseep.ai/app/cr7258-elasticsearch-mcp-server)
 
+[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/cr7258/elasticsearch-mcp-server)](https://archestra.ai/mcp-catalog/cr7258__elasticsearch-mcp-server)
+
 ## Overview
 
 A Model Context Protocol (MCP) server implementation that provides Elasticsearch and OpenSearch interaction. This server enables searching documents, analyzing indices, and managing cluster through a set of tools.
@@ -267,7 +267,20 @@ https://github.com/user-attachments/assets/f7409e31-fac4-4321-9c94-b0ff2ea7ff15
 
 ## Configure Environment Variables
 
-Copy the `.env.example` file to `.env` and update the values accordingly.
+The MCP server supports the following environment variables for authentication:
+
+### Basic Authentication (Username/Password)
+- `ELASTICSEARCH_USERNAME`: Username for basic authentication
+- `ELASTICSEARCH_PASSWORD`: Password for basic authentication
+- `OPENSEARCH_USERNAME`: Username for OpenSearch basic authentication
+- `OPENSEARCH_PASSWORD`: Password for OpenSearch basic authentication
+
+### API Key Authentication (Elasticsearch only) - Recommended
+- `ELASTICSEARCH_API_KEY`: API key for [Elasticsearch](https://www.elastic.co/docs/deploy-manage/api-keys/elasticsearch-api-keys) or [Elastic Cloud](https://www.elastic.co/docs/deploy-manage/api-keys/elastic-cloud-api-keys) Authentication.
+
+### Other Configuration
+- `ELASTICSEARCH_HOSTS` / `OPENSEARCH_HOSTS`: Comma-separated list of hosts (default: `https://localhost:9200`)
+- `ELASTICSEARCH_VERIFY_CERTS` / `OPENSEARCH_VERIFY_CERTS`: Whether to verify SSL certificates (default: `false`)
 
 ## Start Elasticsearch/OpenSearch Cluster
 
@@ -292,7 +305,7 @@ You can access Kibana/OpenSearch Dashboards from http://localhost:5601.
 Using `uvx` will automatically install the package from PyPI, no need to clone the repository locally. Add the following configuration to 's config file `claude_desktop_config.json`.
 
 ```json
-// For Elasticsearch
+// For Elasticsearch with username/password
 {
   "mcpServers": {
     "elasticsearch-mcp-server": {
@@ -309,6 +322,22 @@ Using `uvx` will automatically install the package from PyPI, no need to clone t
   }
 }
 
+// For Elasticsearch with API key
+{
+  "mcpServers": {
+    "elasticsearch-mcp-server": {
+      "command": "uvx",
+      "args": [
+        "elasticsearch-mcp-server"
+      ],
+      "env": {
+        "ELASTICSEARCH_HOSTS": "https://localhost:9200",
+        "ELASTICSEARCH_API_KEY": "<YOUR_ELASTICSEARCH_API_KEY>"
+      }
+    }
+  }
+}
+
 // For OpenSearch
 {
   "mcpServers": {
@@ -332,7 +361,7 @@ Using `uvx` will automatically install the package from PyPI, no need to clone t
 Using `uv` requires cloning the repository locally and specifying the path to the source code. Add the following configuration to Claude Desktop's config file `claude_desktop_config.json`.
 
 ```json
-// For Elasticsearch
+// For Elasticsearch with username/password
 {
   "mcpServers": {
     "elasticsearch-mcp-server": {
@@ -352,6 +381,25 @@ Using `uv` requires cloning the repository locally and specifying the path to th
   }
 }
 
+// For Elasticsearch with API key
+{
+  "mcpServers": {
+    "elasticsearch-mcp-server": {
+      "command": "uv",
+      "args": [
+        "--directory",
+        "path/to/src/elasticsearch_mcp_server",
+        "run",
+        "elasticsearch-mcp-server"
+      ],
+      "env": {
+        "ELASTICSEARCH_HOSTS": "https://localhost:9200",
+        "ELASTICSEARCH_API_KEY": "<YOUR_ELASTICSEARCH_API_KEY>"
+      }
+    }
+  }
+}
+
 // For OpenSearch
 {
   "mcpServers": {
@@ -378,11 +426,15 @@ Using `uv` requires cloning the repository locally and specifying the path to th
 ### Option 1: Using uvx
 
 ```bash
-# export environment variables
+# export environment variables (with username/password)
 export ELASTICSEARCH_HOSTS="https://localhost:9200"
 export ELASTICSEARCH_USERNAME="elastic"
 export ELASTICSEARCH_PASSWORD="test123"
 
+# OR export environment variables (with API key)
+export ELASTICSEARCH_HOSTS="https://localhost:9200"
+export ELASTICSEARCH_API_KEY="<YOUR_ELASTICSEARCH_API_KEY>"
+
 # By default, the SSE MCP server will serve on http://127.0.0.1:8000/sse
 uvx elasticsearch-mcp-server --transport sse
 
@@ -405,11 +457,15 @@ uv run src/server.py elasticsearch-mcp-server --transport sse --host 0.0.0.0 --p
 ### Option 1: Using uvx
 
 ```bash
-# export environment variables
+# export environment variables (with username/password)
 export ELASTICSEARCH_HOSTS="https://localhost:9200"
 export ELASTICSEARCH_USERNAME="elastic"
 export ELASTICSEARCH_PASSWORD="test123"
 
+# OR export environment variables (with API key)
+export ELASTICSEARCH_HOSTS="https://localhost:9200"
+export ELASTICSEARCH_API_KEY="<YOUR_ELASTICSEARCH_API_KEY>"
+
 # By default, the Streamable HTTP MCP server will serve on http://127.0.0.1:8000/mcp
 uvx elasticsearch-mcp-server --transport streamable-http
 

{opensearch_mcp_server-2.0.10 → opensearch_mcp_server-2.0.11}/README.md

@@ -1,10 +1,10 @@
 
 # Elasticsearch/OpenSearch MCP Server
 
-[![smithery badge](https://smithery.ai/badge/elasticsearch-mcp-server)](https://smithery.ai/server/elasticsearch-mcp-server)
-
 [![MseeP.ai Security Assessment Badge](https://mseep.net/pr/cr7258-elasticsearch-mcp-server-badge.png)](https://mseep.ai/app/cr7258-elasticsearch-mcp-server)
 
+[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/cr7258/elasticsearch-mcp-server)](https://archestra.ai/mcp-catalog/cr7258__elasticsearch-mcp-server)
+
 ## Overview
 
 A Model Context Protocol (MCP) server implementation that provides Elasticsearch and OpenSearch interaction. This server enables searching documents, analyzing indices, and managing cluster through a set of tools.
@@ -50,7 +50,20 @@ https://github.com/user-attachments/assets/f7409e31-fac4-4321-9c94-b0ff2ea7ff15
 
 ## Configure Environment Variables
 
-Copy the `.env.example` file to `.env` and update the values accordingly.
+The MCP server supports the following environment variables for authentication:
+
+### Basic Authentication (Username/Password)
+- `ELASTICSEARCH_USERNAME`: Username for basic authentication
+- `ELASTICSEARCH_PASSWORD`: Password for basic authentication
+- `OPENSEARCH_USERNAME`: Username for OpenSearch basic authentication
+- `OPENSEARCH_PASSWORD`: Password for OpenSearch basic authentication
+
+### API Key Authentication (Elasticsearch only) - Recommended
+- `ELASTICSEARCH_API_KEY`: API key for [Elasticsearch](https://www.elastic.co/docs/deploy-manage/api-keys/elasticsearch-api-keys) or [Elastic Cloud](https://www.elastic.co/docs/deploy-manage/api-keys/elastic-cloud-api-keys) Authentication.
+
+### Other Configuration
+- `ELASTICSEARCH_HOSTS` / `OPENSEARCH_HOSTS`: Comma-separated list of hosts (default: `https://localhost:9200`)
+- `ELASTICSEARCH_VERIFY_CERTS` / `OPENSEARCH_VERIFY_CERTS`: Whether to verify SSL certificates (default: `false`)
 
 ## Start Elasticsearch/OpenSearch Cluster
 
@@ -75,7 +88,7 @@ You can access Kibana/OpenSearch Dashboards from http://localhost:5601.
 Using `uvx` will automatically install the package from PyPI, no need to clone the repository locally. Add the following configuration to 's config file `claude_desktop_config.json`.
 
 ```json
-// For Elasticsearch
+// For Elasticsearch with username/password
 {
   "mcpServers": {
     "elasticsearch-mcp-server": {
@@ -92,6 +105,22 @@ Using `uvx` will automatically install the package from PyPI, no need to clone t
   }
 }
 
+// For Elasticsearch with API key
+{
+  "mcpServers": {
+    "elasticsearch-mcp-server": {
+      "command": "uvx",
+      "args": [
+        "elasticsearch-mcp-server"
+      ],
+      "env": {
+        "ELASTICSEARCH_HOSTS": "https://localhost:9200",
+        "ELASTICSEARCH_API_KEY": "<YOUR_ELASTICSEARCH_API_KEY>"
+      }
+    }
+  }
+}
+
 // For OpenSearch
 {
   "mcpServers": {
@@ -115,7 +144,7 @@ Using `uvx` will automatically install the package from PyPI, no need to clone t
 Using `uv` requires cloning the repository locally and specifying the path to the source code. Add the following configuration to Claude Desktop's config file `claude_desktop_config.json`.
 
 ```json
-// For Elasticsearch
+// For Elasticsearch with username/password
 {
   "mcpServers": {
     "elasticsearch-mcp-server": {
@@ -135,6 +164,25 @@ Using `uv` requires cloning the repository locally and specifying the path to th
   }
 }
 
+// For Elasticsearch with API key
+{
+  "mcpServers": {
+    "elasticsearch-mcp-server": {
+      "command": "uv",
+      "args": [
+        "--directory",
+        "path/to/src/elasticsearch_mcp_server",
+        "run",
+        "elasticsearch-mcp-server"
+      ],
+      "env": {
+        "ELASTICSEARCH_HOSTS": "https://localhost:9200",
+        "ELASTICSEARCH_API_KEY": "<YOUR_ELASTICSEARCH_API_KEY>"
+      }
+    }
+  }
+}
+
 // For OpenSearch
 {
   "mcpServers": {
@@ -161,11 +209,15 @@ Using `uv` requires cloning the repository locally and specifying the path to th
 ### Option 1: Using uvx
 
 ```bash
-# export environment variables
+# export environment variables (with username/password)
 export ELASTICSEARCH_HOSTS="https://localhost:9200"
 export ELASTICSEARCH_USERNAME="elastic"
 export ELASTICSEARCH_PASSWORD="test123"
 
+# OR export environment variables (with API key)
+export ELASTICSEARCH_HOSTS="https://localhost:9200"
+export ELASTICSEARCH_API_KEY="<YOUR_ELASTICSEARCH_API_KEY>"
+
 # By default, the SSE MCP server will serve on http://127.0.0.1:8000/sse
 uvx elasticsearch-mcp-server --transport sse
 
@@ -188,11 +240,15 @@ uv run src/server.py elasticsearch-mcp-server --transport sse --host 0.0.0.0 --p
 ### Option 1: Using uvx
 
 ```bash
-# export environment variables
+# export environment variables (with username/password)
 export ELASTICSEARCH_HOSTS="https://localhost:9200"
 export ELASTICSEARCH_USERNAME="elastic"
 export ELASTICSEARCH_PASSWORD="test123"
 
+# OR export environment variables (with API key)
+export ELASTICSEARCH_HOSTS="https://localhost:9200"
+export ELASTICSEARCH_API_KEY="<YOUR_ELASTICSEARCH_API_KEY>"
+
 # By default, the Streamable HTTP MCP server will serve on http://127.0.0.1:8000/mcp
 uvx elasticsearch-mcp-server --transport streamable-http
 

{opensearch_mcp_server-2.0.10 → opensearch_mcp_server-2.0.11}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "opensearch-mcp-server"
-version = "2.0.10"
+version = "2.0.11"
 description = "MCP Server for interacting with Elasticsearch and OpenSearch"
 readme = "README.md"
 requires-python = ">=3.10"

{opensearch_mcp_server-2.0.10 → opensearch_mcp_server-2.0.11}/src/clients/__init__.py

@@ -24,12 +24,14 @@ def create_search_client(engine_type: str) -> SearchClient:
     hosts = [host.strip() for host in hosts_str.split(",")]
     username = os.environ.get(f"{prefix}_USERNAME")
     password = os.environ.get(f"{prefix}_PASSWORD")
+    api_key = os.environ.get(f"{prefix}_API_KEY")
     verify_certs = os.environ.get(f"{prefix}_VERIFY_CERTS", "false").lower() == "true"
     
     config = {
         "hosts": hosts,
         "username": username,
         "password": password,
+        "api_key": api_key,
         "verify_certs": verify_certs
     }
     

{opensearch_mcp_server-2.0.10 → opensearch_mcp_server-2.0.11}/src/clients/base.py

@@ -24,6 +24,7 @@ class SearchClientBase(ABC):
         hosts = config.get("hosts")
         username = config.get("username")
         password = config.get("password")
+        api_key = config.get("api_key")
         verify_certs = config.get("verify_certs", False)
         
         # Disable insecure request warnings if verify_certs is False
@@ -39,8 +40,8 @@ class SearchClientBase(ABC):
         
         # Initialize client based on engine type
         if engine_type == "elasticsearch":
-            # Get auth parameters based on elasticsearch package version
-            auth_params = self._get_elasticsearch_auth_params(username, password)
+            # Get auth parameters based on elasticsearch package version and authentication method
+            auth_params = self._get_elasticsearch_auth_params(username, password, api_key)
             
             self.client = Elasticsearch(
                 hosts=hosts,
@@ -64,20 +65,26 @@ class SearchClientBase(ABC):
             base_url=base_url,
             username=username,
             password=password,
+            api_key=api_key,
             verify_certs=verify_certs,
         )
 
-    def _get_elasticsearch_auth_params(self, username: Optional[str], password: Optional[str]) -> Dict:
+    def _get_elasticsearch_auth_params(self, username: Optional[str], password: Optional[str], api_key: Optional[str]) -> Dict:
         """
         Get authentication parameters for Elasticsearch client based on package version.
         
         Args:
             username: Username for authentication
             password: Password for authentication
+            api_key: API key for authentication
             
         Returns:
             Dictionary with appropriate auth parameters for the ES version
         """
+        # API key takes precedence over username/password
+        if api_key:
+            return {"api_key": api_key}
+            
         if not username or not password:
             return {}
             
@@ -97,20 +104,28 @@ class SearchClientBase(ABC):
             return {"basic_auth": (username, password)}
 
 class GeneralRestClient:
-    def __init__(self, base_url: Optional[str], username: Optional[str], password: Optional[str], verify_certs: bool):
+    def __init__(self, base_url: Optional[str], username: Optional[str], password: Optional[str], api_key: Optional[str], verify_certs: bool):
         self.base_url = base_url.rstrip("/") if base_url else ""
         self.auth = (username, password) if username and password else None
+        self.api_key = api_key
         self.verify_certs = verify_certs
 
     def request(self, method, path, params=None, body=None):
         url = f"{self.base_url}/{path.lstrip('/')}"
+        headers = {}
+        
+        # Add API key to Authorization header if provided
+        if self.api_key:
+            headers["Authorization"] = f"ApiKey {self.api_key}"
+        
         with httpx.Client(verify=self.verify_certs) as client:
             resp = client.request(
                 method=method.upper(),
                 url=url,
                 params=params,
                 json=body,
-                auth=self.auth
+                auth=self.auth if not self.api_key else None,  # Use basic auth only if no API key
+                headers=headers
             )
             resp.raise_for_status()
             ct = resp.headers.get("content-type", "")

opensearch_mcp_server-2.0.11/src/version.py

@@ -0,0 +1 @@
+__version__ = "2.0.11"