Hi @fla_torres , 1: Please install "Splunk MCP Server" app from the splunkbase. https://splunkbase.splunk.com/app/7931 2: You need to make sure token audience should need to tag as "mcp". When you first time create splunk token, in the "Audience" fields please add "mcp" then it will work by below mcp server setting. { "mcpServers": { "splunk-mcp-server": { "command": "npx", "args": [ "-y", "mcp-remote", "https://localhost:8089/services/mcp", "--header", "Authorization: Bearer <splunk_token>" ] } } } Thanks ... View more