Create MCP tools using the Create Tool feature

MCP tools allow AI assistants to interact with Splunk by performing tasks such as retrieving information or executing supported actions. Splunk MCP Server version 1.3 introduces a Create Tool option to simplify creating new tools.

The following image shows the Create Tool option on the Tools tab of the Splunk MCP Server app:

This image shows the Create Tool option on the Tools tab of the Splunk MCP Server app.

You can use this Create Tool option as an alternative or in addition to the current options which are described in Managing custom tools in Splunk MCP Server.

Create a new tool

Complete the following steps:

  1. Open the Splunk MCP Server app and navigate to the Tools tab.

  2. From the top right of that tab select Create Tool.

  3. On the Create Tool page required fields are marked with an asterisk. See the following table for more information:
    Field Details
    Tool name Required. Letters and underscores only, no numbers or other symbols.
    Title Required. The display name for the tool on the Tools page. Spaces, numbers, letters, and symbols are all acceptable.
    Description Required. Explain what this tool does and when it should be used.
    Requires specific Splunk app Tick the box to then pick the Splunk app this tool requires. For example, Splunk Enterprise Security (ES).
    Execution type Required. Select SPL or API.
    SPL search template Required. Enter the SPL this tool uses.
    Row limit option Tick the box to allow your MCP client to set a row limit per tool call up to the global maximum. When not selected the global default row limit is used.
    Time limit option Tick the box to allow your MCP client to configure search time window using earliest_time and latest_time fields for each tool call. When not selected the search uses the time range defined in the SPL.
    Arguments Add arguments to the tools. At least 1 argument is required. Include argument name, description, and type.

    You can also choose to mark as argument as required.
    Examples Optionally add examples to the tool.
    Tags Optionally add tags to the tool.

  4. Select Create when done.

  5. The new tool will now appear on the Tools tab list view, organized as a Custom Tool.

Edit or delete a created tool

Tools you create can be edited or deleted as needed. From the Tools tab in the MCP Server app navigate to the custom tool and make your changes.