Is it possible to use the Splunk MCP Server APP on-premises?

[hk_baek]

Hello,
I have a question regarding the Splunk MCP Server APP provided by Splunkbase.

After configuring Splunk Enterprise On-Prem as below and proceeding with the setup, an error occurs.

Splunk Enterprise On-Prem
a. We have installed Splunk Enterprise 9.4.4 with the Splunk MCP Server APP.
b. Roles, users, and tokens have been created.
c. When configuring the MCP server in Claude and running it,
the following error occurs:

Is there any additional step I should take?

Thank you.          

[livehybrid]

Hi @hk_baek 

Are you using a trusted SSL certificate on your Splunk mgmt port? If not you may need to configure mcp-remote to disable SSL verification:

"remote-example": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://remote.mcp.server/sse"
      ],
      "env": {
        "NODE_TLS_REJECT_UNAUTHORIZED": "0"
      }
    }
  }

Was the URL you are using provided by the MCP app in Splunk?

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[hk_baek]

hi @livehybrid

1. The MCP server I used was downloaded from https://splunkbase.splunk.com/app/7931.

2. I configured it as shown below, but the same error still occurs..

{

  "mcpServers": {

    "splunk-mcp-server": {

      "command": "npx",

      "args": [

        "-y",

        "mcp-remote",

        "https://192.168.235.130:8089/services/mcp",

        "--header",

        "Authorization: Bearer eyJraWQiOiJzcGx1bmsuc2..."

      ],

      "env": {

        "NODE_TLS_REJECT_UNAUTHORIZED": "0"

      }

    }

  }

}

3. Splunk was installed in a VMware instance running on a desktop PC.

Thank you.