{
 "categories": [
  "database",
  "observability"
 ],
 "deployment": "on-prem",
 "evidence": [
  {
   "date": "2026-10-13",
   "fact": "homepage",
   "note": "The OpenSearch homepage is the product site and links downloads and docs.opensearch.org.",
   "source": "https://opensearch.org/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "license",
   "note": "The homepage says OpenSearch is open source and fully Apache 2.0 licensed from ingest to dashboard.",
   "source": "https://opensearch.org/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "deployment",
   "note": "The homepage offers a download of the engine. A vendor-hosted OpenSearch cloud was not documented on the opened pages.",
   "source": "https://opensearch.org/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "platforms",
   "note": "The security page says an authenticated user can be mapped to a role with access to OpenSearch Dashboards, a web UI. Operating systems for the download were not listed on the opened homepage.",
   "source": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.api.exists",
   "note": "The project README links OpenSearch REST APIs for indices, search, count, explain, and cluster health, and documents a generic tool for any API path.",
   "source": "https://raw.githubusercontent.com/opensearch-project/opensearch-mcp-server-py/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.api.kinds[0]",
   "note": "The generic tool calls OpenSearch HTTP API endpoints with a method, path, query parameters, and a body.",
   "source": "https://raw.githubusercontent.com/opensearch-project/opensearch-mcp-server-py/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.api.auth[0]",
   "note": "Basic authentication uses a username and password against the Security plugin internal user database.",
   "source": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.api.auth[1]",
   "note": "The security page says a JSON web token can carry the username and roles.",
   "source": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.api.auth[2]",
   "note": "The security page says TLS client certificate authentication uses the certificate distinguished name.",
   "source": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.api.auth[3]",
   "note": "The security page lists LDAP and Active Directory as authentication backends.",
   "source": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.api.auth[4]",
   "note": "The security page lists SAML as an authentication backend and says SAML stores roles as attributes.",
   "source": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.api.coverage",
   "note": "The README names search, index, count, and cluster-health APIs and a generic caller. The API reference index was not opened, so coverage is partial.",
   "source": "https://raw.githubusercontent.com/opensearch-project/opensearch-mcp-server-py/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.api.docs",
   "note": "Opened as the current Security plugin authentication backends page.",
   "source": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.mcp.first_party",
   "note": "The opensearch-project repository README documents the OpenSearch MCP server.",
   "source": "https://raw.githubusercontent.com/opensearch-project/opensearch-mcp-server-py/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.mcp.verdict",
   "note": "The server is published by the OpenSearch project, so the verdict is official.",
   "source": "https://raw.githubusercontent.com/opensearch-project/opensearch-mcp-server-py/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "modalities.data_access.export[0]",
   "note": "Search and cluster tools read JSON responses from OpenSearch HTTP APIs.",
   "source": "https://raw.githubusercontent.com/opensearch-project/opensearch-mcp-server-py/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "verdict.scores.api",
   "note": "Documented HTTP APIs with several Security plugin authentication backends. The full reference index was not opened. Score 7.",
   "source": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "verdict.scores.mcp",
   "note": "Official project MCP server. Default tools are core read and search operations, with a generic API tool. Score 7.",
   "source": "https://raw.githubusercontent.com/opensearch-project/opensearch-mcp-server-py/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "freshness.watch[0].url",
   "note": "Opened as the current OpenSearch homepage.",
   "source": "https://opensearch.org/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "freshness.watch[1].url",
   "note": "Opened as the current authentication backends page.",
   "source": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "tier": "declared"
  },
  {
   "date": "2026-10-13",
   "fact": "freshness.watch[2].url",
   "note": "Opened as the current OpenSearch MCP server README.",
   "source": "https://raw.githubusercontent.com/opensearch-project/opensearch-mcp-server-py/main/README.md",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-10-13",
  "volatility": "medium",
  "watch": [
   {
    "type": "docs",
    "url": "https://opensearch.org/"
   },
   {
    "type": "docs",
    "url": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/"
   },
   {
    "type": "mcp",
    "url": "https://raw.githubusercontent.com/opensearch-project/opensearch-mcp-server-py/main/README.md"
   }
  ]
 },
 "homepage": "https://opensearch.org/",
 "id": "opensearch",
 "license": "open-source",
 "modalities": {
  "agent_docs": {
   "llms_txt": "unknown"
  },
  "api": {
   "auth": [
    "basic",
    "jwt",
    "client-certificate",
    "ldap",
    "saml"
   ],
   "coverage": "partial",
   "docs": "https://docs.opensearch.org/latest/security/authentication-backends/authc-index/",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": "unknown"
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "json"
   ],
   "import": []
  },
  "extensibility": {
   "scripting": [],
   "webhooks": "unknown"
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": true,
   "third_party": [],
   "verdict": "official"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. OpenSearch documents cluster REST APIs and a first-party MCP server for those APIs.\n",
   "ui_stack": [],
   "vendor_support": []
  },
  "sdk": {
   "exists": "unknown",
   "languages": [],
   "official": "unknown"
  }
 },
 "name": "OpenSearch",
 "platforms": [
  "web"
 ],
 "related": {
  "alternatives": [
   "elasticsearch"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "OpenSearch Software Foundation",
 "verdict": {
  "best_path": "api",
  "scores": {
   "api": 7,
   "cli": null,
   "computer_use": null,
   "integrations": null,
   "mcp": 7,
   "overall": 7,
   "rpa": null
  },
  "summary": "OpenSearch is automatable today through its REST APIs. This record is the OpenSearch engine from the OpenSearch Software Foundation. It is not the Elasticsearch record, and Amazon OpenSearch Service was not reviewed as a separate product. The homepage calls OpenSearch an open-source search and observability engine under the Apache 2.0 license, and a Linux Foundation project, with a download link. The Security plugin documentation says a request can authenticate with HTTP Basic username and password, a JSON web token, a TLS client certificate, LDAP or Active Directory, or SAML. The opensearch-project MCP server README names core tools for listing indices, reading mappings, searching, counting, explaining hits, multi-search, shard information, and cluster health, plus a generic tool that calls any OpenSearch API path. Those core tools are enabled by default. Cluster state, observability, and search-relevance tools are disabled unless an operator enables the category. The server runs locally over stdio or streaming HTTP, from the PyPI package opensearch-mcp-server-py. Connection settings can be basic credentials, IAM, header auth, or mTLS, or omitted so the caller passes them on each tool call. The full API reference index was not opened, so API coverage is partial. Connector catalogs were not opened. Computer-use viability is unassessed. API scores 7. MCP scores 7. API is the best path because the generic MCP tool is a client of the cluster APIs, and the default tool set is a subset of those APIs.\n"
 }
}