Can't make Splunk native MCP Server work with N8N MCP Client

[xvalette]

Hello Splunk Community 🙂,

I am trying to use the following MCP Server : https://splunkbase.splunk.com/app/7931 on my Splunk On-Prem Docker deployment,

The application is installed successfully, the token was created for the admin role, and connectivity is ok between the MCP Client and the MCP Server :

xvalette@XVALETTE-M-06WY ~ % curl -X GET "https://splunk-xvalette.com/services/mcp" \
-H "Authorization: Bearer MY_ADMIN_TOKEN"

{"message":"Method not allowed"}

 However, I am getting an error "Could not connect to your MCP server" on the N8N MCP Client :

I am able to connect to other MCP Servers, so the N8N configuration seems okay,

Is there any step that I am missing to make this work ?

Thanks for your help,

Xavier

[Cloud001]

Thank you for your reply.

[Cloud001]

This is not an answer to the question.
I am also testing the APP, but I’m reaching out because the connection is not working.

- Instead of using cmd, were you able to connect when querying through an MCP Host (e.g., Claude, Cursor, etc.)?

[xvalette]

Neither Claude or N8N MCP Client is able to connect to the MCP server,

I am not an MCP expert, but the logging is pretty light on my end..

The logs on Claude : 

2025-09-26T17:21:24.987Z [info] [splunk-mcp-server] Server started and connected successfully

2025-09-26T17:21:25.027Z [info] [splunk-mcp-server] Message from client: {"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"claude-ai","version":"0.1.0"}},"jsonrpc":"2.0","id":0}

2025-09-26T17:21:26.070Z [info] [splunk-mcp-server] Server transport closed

2025-09-26T17:21:26.070Z [info] [splunk-mcp-server] Client transport closed

2025-09-26T17:21:26.070Z [info] [splunk-mcp-server] Server transport closed unexpectedly, this is likely due to the process exiting early. If you are developing this MCP server you can add output to stderr (i.e. `console.error('...')` in JavaScript, `print('...', file=sys.stderr)` in python) and it will appear in this log.

2025-09-26T17:21:26.070Z [error] [splunk-mcp-server] Server disconnected. For troubleshooting guidance, please visit our [debugging documentation](https://modelcontextprotocol.io/docs/tools/debugging)

2025-09-26T17:21:26.070Z [info] [splunk-mcp-server] Client transport closed

[xvalette · Accepted solution]

I just fix my situation,

The audience should be "mcp",

I saw this while checking the code :

Hope it will help !