
MCP Apps bring Elastic&#39;s security and observability workflows into third-party AI tools, enabling teams to act on data directly where they work, with additional capabilities for search and data exploration


Elastic

MCP Apps bring Elastic's security and observability workflows into third-party AI tools, enabling teams to act on data directly where they work, with additional capabilities for search and data exploration


<a xmlns="http://www.w3.org/1999/xhtml" rel="nofollow" href="https://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Fwww.elastic.co%2F&amp;esheet=54520032&amp;newsitemid=20260421761409&amp;lan=en-US&amp;anchor=Elastic&amp;index=1&amp;md5=553b319660c2c174e5a218962b6fb3b4" shape="rect">Elastic</a> (NYSE:<a class="ticker" href="https://www.benzinga.com/quote/ESTC">ESTC</a>), the Search AI Company, today announced MCP Apps for Elastic, delivering first-of-their-kind agent-native UI experiences for security and observability workflows across third-party coding tools and chat clients. The new MCP Apps enable teams to investigate threats, diagnose system behavior, and act on data directly within the AI tools they already use, without switching tools or stitching together separate systems.


Built on the <a xmlns="http://www.w3.org/1999/xhtml" rel="nofollow" href="https://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Fmodelcontextprotocol.io%2Fextensions%2Fapps%2Foverview&amp;esheet=54520032&amp;newsitemid=20260421761409&amp;lan=en-US&amp;anchor=Model+Context+Protocol+%28MCP%29+apps+spec&amp;index=2&amp;md5=c31134c64829b2d1d92b107af3f737b5" shape="rect">Model Context Protocol (MCP) apps spec</a>, the open standard co-authored by Anthropic and OpenAI, these apps allow AI assistants to return fully interactive user interfaces rendered directly within environments such as Claude, VS Code, GitHub Copilot, Goose, Postman, and MCPJam.


Most AI integrations today stop at conversational text. That works for simple queries, but breaks down for workflows that are inherently visual and interactive, including alert triage, investigation graphs, dashboards, and distributed traces. Elastic's MCP Apps close that gap by supporting security and observability workflows in a live AI-native interface that users can explore, filter, and act on, allowing teams to manage threat detection or system diagnosis without leaving the conversation.


"The MCP App for Elastic Security bridges the gap between automated detection and manual hunting," said Mandy Andress, CISO of Elastic. "By bringing our security data directly into a single interface within Claude Desktop, we surfaced &#39;silent&#39; threats in under an hour, risks that didn&#39;t trigger standard alerts but required immediate action. It&#39;s a force multiplier for our analysts.&#34;


"Our customers are increasingly working inside AI-native environments," said Ken Exner, chief product officer at Elastic. "With our MCP Apps, Elastic meets them there by bringing security, observability, and search workflows into the AI tools that they are using so that teams can investigate threats and diagnose systems without switching tools. The answer is no longer a summary, it's the workflow itself."


While early MCP App adopters have focused on productivity tools like Amplitude, Asana, Figma, and Slack, the Elastic Security MCP App enables analysts to triage alerts, run ES&#x7C;QL queries, investigate threats, and manage cases through interactive views rendered directly in the conversation. Workflows such as alert lists, process trees, and investigation graphs remain fully interactive, allowing analysts to move from question to action without tab switching or hand-offs.


The MCP App for Security provides core tasks for analysts, including:

<ul xmlns="http://www.w3.org/1999/xhtml" class="bwlistdisc">
<li xmlns="http://www.w3.org/1999/xhtml">
Alert triage: severity grouping, AI verdicts, process trees, and one-click case creation

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Attack discovery: correlated attack chains with MITRE ATT&amp;CK mapping, risk scoring, and bulk case creation

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Threat hunting: an ES&#x7C;QL workbench with auto-executed queries, clickable entities, and an investigation graph

</li>
</ul>
The Elastic Observability MCP App enables teams to explore distributed traces, inspect service dependencies, and diagnose system health through interactive views rendered directly in the conversation, helping engineers move from detection to root cause analysis without switching tools.


The MCP App for Observability provides, end-to-end Kubernetes &amp; APM incident investigation, including:

<ul xmlns="http://www.w3.org/1999/xhtml" class="bwlistdisc">
<li xmlns="http://www.w3.org/1999/xhtml">
Cluster &amp; service health rollup: overall health badges, degraded services with reasons, top pod memory consumers, ML anomaly severity breakdown, and service throughput — all oriented in a single adaptive inline view

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Anomaly detection &amp; dependency mapping: ML-powered anomaly explanations with actual vs. typical values and time-series context, plus interactive service topology graphs with per-edge call volume and latency, and node failure blast radius diagrams showing full-outage versus degraded deployments with rescheduling feasibility

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Live monitoring &amp; alerting: ES&#x7C;QL-backed observe mode for one-shot metric queries, live threshold watching, and ML anomaly triggers, alongside persistent Kibana alert rule creation and management directly from the conversation

</li>
</ul>
Elastic also provides MCP Apps for search and data exploration. The Search MCP App enables users to explore data and build dashboards through natural language, with results rendered as interactive visualizations that can be edited and exported.


The MCP App for Search, includes:

<ul xmlns="http://www.w3.org/1999/xhtml" class="bwlistdisc">
<li xmlns="http://www.w3.org/1999/xhtml">
Dashboard creation: build dashboards from natural language with panels automatically generated from your data

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Data exploration: query and analyze data using ES&#x7C;QL with results rendered inline

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Interactive editing: refine, rearrange, and export dashboards directly from the conversation

</li>
</ul>
Availability


Elastic MCP Apps for Security, Observability, and Search are available now in public preview, with support across platforms including Claude, Claude Desktop, VS Code, GitHub Copilot, Goose, Postman, and MCPJam.


To find out more read the blog: <a xmlns="http://www.w3.org/1999/xhtml" rel="nofollow" href="https://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Fwww.elastic.co%2Fsearch-labs%2Fblog%2Fmcp-apps-elastic&amp;esheet=54520032&amp;newsitemid=20260421761409&amp;lan=en-US&amp;anchor=Elastic+Security%2C+Search%2C+and+Observability+now+run+as+an+interactive+UI+in+your+AI+tools&amp;index=3&amp;md5=fa61150a1e6d7d85fb70ca23fdf47292" shape="rect">Elastic Security, Search, and Observability now run as an interactive UI in your AI tools</a>


About Elastic


Elastic (NYSE:<a class="ticker" href="https://www.benzinga.com/quote/ESTC">ESTC</a>) enables organizations to search, analyze, and act on all types of data in real time. Its solutions for search, observability, and security are built on the Elastic Search AI Platform, helping teams solve problems faster and operate more efficiently at scale.

<img xmlns="http://www.w3.org/1999/xhtml" alt="" src="https://cts.businesswire.com/ct/CT?id=bwnews&amp;sty=20260421761409r1&amp;sid=benz2&amp;distro=nx&amp;lang=en" style="width:0;height:0"></img>View source version on businesswire.com: <a xmlns="http://www.w3.org/1999/xhtml" href="https://www.businesswire.com/news/home/20260421761409/en/" rel="nofollow">https://www.businesswire.com/news/home/20260421761409/en/</a>
Elastic PR
 <a xmlns="http://www.w3.org/1999/xhtml" rel="nofollow" href="mailto:PR-team@elastic.co" shape="rect">PR-team@elastic.co</a>

ESTC

Elastic Delivers First Embedded AI Experiences for Observability and Security Inside Third-Party AI Tools

Elastic Introduces MCP Apps to Enhance AI Workflows and Security

<section class="insight" data-version="1">
 <section data-block="information">
 <h3>Information</h3>
 MCP Apps bring Elastic&amp;#39;s security and observability workflows into third-party AI tools, enabling teams to act on data directly where they work, with additional capabilities for search and data exploration


Elastic
 </section>

 <section data-block="ai-summary-paragraph">
 <h3>AI Summary</h3>
 Elastic has launched MCP Apps, integrating security and observability workflows directly into popular AI tools. This development enhances operational efficiency, allowing teams to detect threats and manage incidents without switching applications, which could accelerate adoption and revenue growth.
 </section>

 <section data-block="ai-summary-bullets">
 <h3>Key Points</h3>
 <ul><li>Elastic launches MCP Apps for enhanced security and observability workflows.</li><li>Apps integrate with popular AI tools like VS Code and GitHub Copilot.</li><li>MCP Apps improve operational efficiency without switching tools.</li><li>Elastic&#039;s technology surfaces hidden threats rapidly for security teams.</li><li>Public preview of MCP Apps available across multiple platforms now.</li></ul>
 </section>

 <section data-block="companies-mentioned">
 <h3>Companies Mentioned</h3>
 <ul><li>Anthropic (N/A): Collaborated on the open standards for the MCP apps.</li><li>OpenAI (N/A): Partner in co-authoring the Model Context Protocol (MCP).</li><li>GitHub Copilot (N/A): Integration with MCP Apps may enhance developer workflows.</li><li>Asana (ASAN): Beneficiary of MCP Apps, may see increased user engagement.</li></ul>
 </section>

 <section data-block="category">
 <h3>Corporate Developments</h3>
 This news falls under &#039;Corporate Developments&#039; as it signifies a substantial enhancement of Elastic&#039;s product offering. The introduction of MCP Apps aligns with increasing market demand for integrated security solutions within AI platforms, positioning Elastic favorably in a competitive landscape.
 </section>

 <section data-block="market-moving">
 <h3>Market-Moving</h3>
 <ul><li>MCP Apps&#039; integration could expand Elastic&#039;s market share in security software.</li><li>Rapid threat detection capabilities may enhance customer satisfaction and retention.</li><li>Increased efficiency in security workflows can attract new enterprise customers quickly.</li><li>Broader AI tool adoption could significantly boost Elastic&#039;s service usage and revenue.</li></ul>
 </section>

 <section data-block="key-facts">
 <h3>Key Facts</h3>
 <ul><li>MCP Apps enable direct action on data within AI tools like Claude and VS Code.</li><li>The new applications can detect security threats much faster than traditional methods.</li><li>MCP Apps are now in public preview and are available across multiple platforms.</li><li>Elastic&#039;s solutions aim to provide real-time analysis and action across all data types.</li><li>Elastic is co-authored the Model Context Protocol (MCP) specification.</li></ul>
 </section>

 <section data-block="trading-thesis">
 <h3>Trading Thesis</h3>
 Bullish on ESTC as MCP Apps may drive higher customer retention and adoption in AI environments over the next 12 months.
 </section>
</section>



MCP Apps bring Elastic's security and observability workflows into third-party AI tools, enabling teams to act on data directly where they work, with additional capabilities for search and data exploration


<a xmlns="http://www.w3.org/1999/xhtml" rel="nofollow" href="https://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Fwww.elastic.co%2F&amp;esheet=54520032&amp;newsitemid=20260421761409&amp;lan=en-US&amp;anchor=Elastic&amp;index=1&amp;md5=553b319660c2c174e5a218962b6fb3b4" shape="rect">Elastic</a> (NYSE:<a class="ticker" href="https://www.benzinga.com/quote/ESTC">ESTC</a>), the Search AI Company, today announced MCP Apps for Elastic, delivering first-of-their-kind agent-native UI experiences for security and observability workflows across third-party coding tools and chat clients. The new MCP Apps enable teams to investigate threats, diagnose system behavior, and act on data directly within the AI tools they already use, without switching tools or stitching together separate systems.


Built on the <a xmlns="http://www.w3.org/1999/xhtml" rel="nofollow" href="https://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Fmodelcontextprotocol.io%2Fextensions%2Fapps%2Foverview&amp;esheet=54520032&amp;newsitemid=20260421761409&amp;lan=en-US&amp;anchor=Model+Context+Protocol+%28MCP%29+apps+spec&amp;index=2&amp;md5=c31134c64829b2d1d92b107af3f737b5" shape="rect">Model Context Protocol (MCP) apps spec</a>, the open standard co-authored by Anthropic and OpenAI, these apps allow AI assistants to return fully interactive user interfaces rendered directly within environments such as Claude, VS Code, GitHub Copilot, Goose, Postman, and MCPJam.


Most AI integrations today stop at conversational text. That works for simple queries, but breaks down for workflows that are inherently visual and interactive, including alert triage, investigation graphs, dashboards, and distributed traces. Elastic's MCP Apps close that gap by supporting security and observability workflows in a live AI-native interface that users can explore, filter, and act on, allowing teams to manage threat detection or system diagnosis without leaving the conversation.


"The MCP App for Elastic Security bridges the gap between automated detection and manual hunting," said Mandy Andress, CISO of Elastic. "By bringing our security data directly into a single interface within Claude Desktop, we surfaced &#39;silent&#39; threats in under an hour, risks that didn&#39;t trigger standard alerts but required immediate action. It&#39;s a force multiplier for our analysts.&#34;


"Our customers are increasingly working inside AI-native environments," said Ken Exner, chief product officer at Elastic. "With our MCP Apps, Elastic meets them there by bringing security, observability, and search workflows into the AI tools that they are using so that teams can investigate threats and diagnose systems without switching tools. The answer is no longer a summary, it's the workflow itself."


While early MCP App adopters have focused on productivity tools like Amplitude, Asana, Figma, and Slack, the Elastic Security MCP App enables analysts to triage alerts, run ES&#x7C;QL queries, investigate threats, and manage cases through interactive views rendered directly in the conversation. Workflows such as alert lists, process trees, and investigation graphs remain fully interactive, allowing analysts to move from question to action without tab switching or hand-offs.


The MCP App for Security provides core tasks for analysts, including:

<ul xmlns="http://www.w3.org/1999/xhtml" class="bwlistdisc">
<li xmlns="http://www.w3.org/1999/xhtml">
Alert triage: severity grouping, AI verdicts, process trees, and one-click case creation

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Attack discovery: correlated attack chains with MITRE ATT&amp;CK mapping, risk scoring, and bulk case creation

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Threat hunting: an ES&#x7C;QL workbench with auto-executed queries, clickable entities, and an investigation graph

</li>
</ul>
The Elastic Observability MCP App enables teams to explore distributed traces, inspect service dependencies, and diagnose system health through interactive views rendered directly in the conversation, helping engineers move from detection to root cause analysis without switching tools.


The MCP App for Observability provides, end-to-end Kubernetes &amp; APM incident investigation, including:

<ul xmlns="http://www.w3.org/1999/xhtml" class="bwlistdisc">
<li xmlns="http://www.w3.org/1999/xhtml">
Cluster &amp; service health rollup: overall health badges, degraded services with reasons, top pod memory consumers, ML anomaly severity breakdown, and service throughput — all oriented in a single adaptive inline view

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Anomaly detection &amp; dependency mapping: ML-powered anomaly explanations with actual vs. typical values and time-series context, plus interactive service topology graphs with per-edge call volume and latency, and node failure blast radius diagrams showing full-outage versus degraded deployments with rescheduling feasibility

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Live monitoring &amp; alerting: ES&#x7C;QL-backed observe mode for one-shot metric queries, live threshold watching, and ML anomaly triggers, alongside persistent Kibana alert rule creation and management directly from the conversation

</li>
</ul>
Elastic also provides MCP Apps for search and data exploration. The Search MCP App enables users to explore data and build dashboards through natural language, with results rendered as interactive visualizations that can be edited and exported.


The MCP App for Search, includes:

<ul xmlns="http://www.w3.org/1999/xhtml" class="bwlistdisc">
<li xmlns="http://www.w3.org/1999/xhtml">
Dashboard creation: build dashboards from natural language with panels automatically generated from your data

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Data exploration: query and analyze data using ES&#x7C;QL with results rendered inline

</li>
<li xmlns="http://www.w3.org/1999/xhtml">
Interactive editing: refine, rearrange, and export dashboards directly from the conversation

</li>
</ul>
Availability


Elastic MCP Apps for Security, Observability, and Search are available now in public preview, with support across platforms including Claude, Claude Desktop, VS Code, GitHub Copilot, Goose, Postman, and MCPJam.


To find out more read the blog: <a xmlns="http://www.w3.org/1999/xhtml" rel="nofollow" href="https://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Fwww.elastic.co%2Fsearch-labs%2Fblog%2Fmcp-apps-elastic&amp;esheet=54520032&amp;newsitemid=20260421761409&amp;lan=en-US&amp;anchor=Elastic+Security%2C+Search%2C+and+Observability+now+run+as+an+interactive+UI+in+your+AI+tools&amp;index=3&amp;md5=fa61150a1e6d7d85fb70ca23fdf47292" shape="rect">Elastic Security, Search, and Observability now run as an interactive UI in your AI tools</a>


About Elastic


Elastic (NYSE:<a class="ticker" href="https://www.benzinga.com/quote/ESTC">ESTC</a>) enables organizations to search, analyze, and act on all types of data in real time. Its solutions for search, observability, and security are built on the Elastic Search AI Platform, helping teams solve problems faster and operate more efficiently at scale.

<img xmlns="http://www.w3.org/1999/xhtml" alt="" src="https://cts.businesswire.com/ct/CT?id=bwnews&amp;sty=20260421761409r1&amp;sid=benz2&amp;distro=nx&amp;lang=en" style="width:0;height:0"></img>View source version on businesswire.com: <a xmlns="http://www.w3.org/1999/xhtml" href="https://www.businesswire.com/news/home/20260421761409/en/" rel="nofollow">https://www.businesswire.com/news/home/20260421761409/en/</a>
Elastic PR
 <a xmlns="http://www.w3.org/1999/xhtml" rel="nofollow" href="mailto:PR-team@elastic.co" shape="rect">PR-team@elastic.co</a>

Elastic has launched MCP Apps, integrating security and observability workflows directly into popular AI tools. This development enhances operational efficiency, allowing teams to detect threats and manage incidents without switching applications, which could accelerate adoption and revenue growth.

Elastic Delivers First Embedded AI Experiences for Observability and Security Inside Third-Party AI Tools

AI Summary

Sentiment Rationale

Trading Thesis

Market-Moving

Key Facts

Companies Mentioned

Corporate Developments

Related News