Standalone MCP Server with SSL

Plugins Machine Learning
1

Hi all,

I am using OS 3.2.0. I am just wondering if built-in MCP server is production ready or not? If not, then is the standalone version production ready? If yes, then how can I configure it to use ssl and pass certificates to it?

Thanks

2

Hi @asfoorial ,

Are you wondering if Opensearch supports SSL? Or if using SSL with MCP gives the same protection? As Opensearch configured with SSL?

Here is a couple of points of interest to review and read, https://opensearch.org/blog/introducing-mcp-in-opensearch/ and configuring ssl and security in Opensearch About Security - OpenSearch Documentation & Configuring TLS certificates - OpenSearch Documentation .

Review the above and deploy a test cluster and test how it works.

Leeroy.

3

My OS cluster is already configured with SSL. However, the docs states that the built-in MCP server is experimental. I want to know if that is still the case. In this case, my alternative is to use the standalone mcp server. But i couldn’t find any option to configure ssl in the standalone opensearch mcp server.

4

The built-in MCP server will reach General Availability (GA) in version 3.3, with support for the Streamable HTTP protocol only.

The standalone MCP server, available at opensearch-mcp-server-py, is already GA. At present, it does not support passing certificates directly. However, this should be a relatively simple enhancement—by modifying the referenced code section. We encourage you to open an issue on the repository if you’d like to request this feature.

Alternatively, you can instantiate the MCP server programmatically, apply the changes yourself, and continue using the remaining functionality without waiting for an official update. For details, please refer to the developer guide.

1 Like
5

Thanks for the clarification.

Does the Streamable HTTP MCP in 3.3 require installing the transport-reactor-netty4 plugin, which is currently experimental? Or would it be an OpenSearch built-in implementation?

6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.