High-performance MCP server for log analysis. Give Claude the ability to analyze massive log files with SIMD-accelerated parsing. 5-50x faster than awk for aggregations.

LEXIS — from raw extraction to complete analysis and portable-ready case. Multi-device Android & iOS forensics powered by the LEAPPs.

MCP server for memory forensics with Volatility 3 — tamper-evident evidence store, DKOM/rootkit detection, and evidence-grounded LLM investigation.

A comprehensive MCP server for Windows digital forensics on KALI Linux

Disk and Memory Forensics MCP Server

AI Agent Tool for Penetration Testing and Network Forensics

Local LLM cost & token forensics proxy with anomaly detection

Build a forensic super-timeline by merging & normalizing log/artifact CSVs

The Memory Your AI Lacks - MCP server giving AI Senior Developer Intuition through git forensics

Model Context Protocol (MCP 2.0) server with Code Mode for OMBRIX steganography & visual forensics suite

AI Agent Tool for Penetration Testing and Network Forensics

Windows Forensics MCP Server - EVTX parsing, Registry analysis, PE analysis, API Monitor knowledge base, and remote artifact collection for DFIR

SKEPTIC — the local text forensics lab. Paste anything, trust nothing, transmit nothing. 9 deterministic instruments · zero dependencies · browser app + REST API + MCP server.

Zero-dependency Go & Rust stripped binary forensics, pclntab/v0 symbol & struct/vtable recovery, x86_64/ARM64 XREF analyzer, Ghidra/IDA/Binja exporter & MCP server

Passive process forensics for Windows, Linux and macOS. Records process behavior locally and produces an AI-ready evidence bundle.

Cross-platform GUI, CLI and MCP server for Microsoft ESE databases (ntds.dit, SRUDB.dat, Exchange .edb, WebCacheV01.dat, Windows.edb) - digital forensics tool with multi-format extract and reporting

MCP (Model Context Protocol) interface for Volatility 3, providing memory forensics capabilities through LLM-based tools. Query, analyze, and automate Volatility 3 plugins using natural language via API or agent-based workflows

Model Context Protocol server for CyberChef — exposes GCHQ's "Cyber Swiss Army Knife" as AI-agent tools: 504 operations across encryption, encoding, compression and forensics, on MCP protocol revision 2026-07-28

AI-native digital forensics & cybercrime investigation platform. 7 MCP servers (Volatility3, Ghidra, Wireshark, OSINT, threat-intel & more) orchestrated by Claude, ChatGPT, or Ollama — fully containerized, chain-of-custody enforced, court-admissible output.

Universal Cybersecurity Model Context Protocol (MCP) Server & Token-Saving Agent Skills for Claude Desktop, Cursor, GPT-4o, and Antigravity. Purple Teaming, WAF Triad Audit, Malware PE Triage, USB Forensics & Caveman Token Optimizer.

MCP server for Indian stock market research (NSE/BSE) — fundamentals, forensic accounting scores, DCF valuation, screening, prices, technicals and news for 6,000+ stocks via InvestSights. Works with Claude, ChatGPT, Cursor, and any MCP client.

AI coding companion that reveals hidden file dependencies via git forensics to prevent breaking changes.

Read-only Polymarket research MCP server (wallet investigation, market metadata, cross-wallet correlation, forensics). 21 tools, 4 tiers.

Multi-agent observability: cascade failure detection, heartbeat monitoring, cross-agent tracing, and forensic replay

Servidor MCP de código aberto para jurídico e licitações no Brasil: prazos com feriado forense, PNCP, índices do BC. Avançado com chave BitBusca.

Zero-install, server-preserving web archiver and ISO 28500 forensic engine for offline replication and digital preservation.

Pay-per-call market intelligence for AI trading agents — x402 (USDC on Base) + MCP. Market regime, execution costs, bar QC, backtest forensics.

🇨🇱 Suite de Inteligencia Jurídica y 87 Herramientas MCP para Chile (Civil Law): BCN, PJUD, LegalGraphify, Doctrina y OCR Forense

depot.dev MCP server: read-only CI failure diagnosis, container build forensics, and usage insight for coding agents

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.

AI Art Forensics & Analysis Framework — Brushstroke analysis, style attribution, forgery detection, and interpretable visual explanations powered by vision transformers.

AWS EC2 MCP Server – instance inventory, security group exposure analysis, user-data inspection, and console output forensics for incident response

MCP server for Depot (depot.dev): read-only CI failure diagnosis, container build forensics, and usage insight for Claude Code, Cursor, Copilot, Codex and other agents

MCP server for Indian stock research (NSE/BSE) — fundamentals, forensic scores, DCF valuation, screening for 2,800+ stocks. Works with Claude, ChatGPT, Perplexity, Cursor & any MCP client.

Local, no-upload video forensics toolkit and MCP server: metadata, chapters, frames, subtitle-first transcripts, 527-class sound tags and comment analysis. Never downloads the whole video.

MCP server for Google Search via pure scraping (no API key): HTTP fast path with cookie bootstrap, Camoufox browser fallback, proxy pool, adaptive cooldowns, forensics.

Zero-dependency Python & TypeScript client SDK for TITAN Capital Forensics x402 Base USDC gateways: E-Invoice/ISO 20022 Validator (zsh.005/call) & OFAC SDN/KYT Screener (zsh.003/call) + MCP Server integration

MCP server for Tuteliq — 87 tools for child safety, fraud detection, synthetic content forensics, identity verification, grooming, bullying, sextortion, document analysis, and content moderation. Interactive UI widgets for Claude, Cursor, and MCP-compatib

Open infrastructure for Argentina's sociedades de IA (AI-operated companies, draft General Companies Law art. 14). 36 npm packages, 235 typed tools for the Vercel AI SDK, 6 RFCs, forensic audit log. MIT.

local-first browser-session forensics + repro for AI coding agents. peek's native messaging host + stdio MCP server — owns ~/.peek/sessions.db (better-sqlite3) and bridges the browser extension, CLI, and AI tools to one local source of truth.

See where your OpenAI Codex tokens, dollars and plan limits go: every response counted once, live 5-hour and weekly limits from your own logs, quota forensics, a web dashboard, menu bar and tray, an MCP server and a share card. Python, no dependencies, no login.

Free self-hosted OSINT investigator's toolkit with an MCP server for Claude Code and Claude Desktop. 19 tools in one interface: crypto tracing, phishing fingerprinting and hunting, attack surface, route map, domain intel, Telegram OSINT, IP reputation, email header forensics, username enumeration, HIBP breach checks, ransomware tracking. AGPL-3.0.

Personal breach aggregator — HIBP + DeHashed + stealer-log triage

MCP server for building SOLVE-IT Workflow Builder workflows from Claude Desktop and Claude Code

Surface program-execution evidence from Windows Prefetch exports

Analyze exported browser history/downloads for IOCs and exfil signs

Grade TLS config (protocols/ciphers/expiry) from openssl/sslyze output

Analyze an NTFS $MFT CSV for timestomping and suspicious file activity

Find brute-force, persistence & lateral-movement signals in exported Windows event logs

Triage memory-dump artifacts: strings, IOCs, suspicious processes from a dump export

⚡ Autonomous reverse engineering engine & Model Context Protocol (MCP) server for binaries and applications in Systems Rust

Persistent local memory for Claude Code. Total recall from your session files — no API calls, no summaries, no AI deciding what matters.

Local, payload-redacted PCAP troubleshooting over MCP with deterministic packet citations—no Wireshark or TShark required.

Builds a transaction graph from ledger/account data and surfaces structuring, layering, and mule-network patterns for AML triage.

Invisible per-recipient image watermarks designed to survive chat-app compression. CLI and MCP server.

Operator attribution and digital evidence tools specialized for the digital advertising ecosystem—aggregating websites linked to suspicious connections into operator clusters and generating reproducible evidence packages. 操弄者歸因與數位證據工具，特化於數位廣告生態——把可疑連結背後的網站聚合成操作者群組，輸出可重現證據封包。

OSINT knowledge base + MCP server for autonomous AI agents — Claude Code, Cursor, Kimi K3, recon & threat intel playbooks.

One-command static triage of Android APK/AAB binaries: surfaces hardcoded secrets, exported components, dangerous permissions, and insecure manifest flags as a single SARIF report.

Open-source Bacen Evidence Engine for Brazilian fintechs — citable, exportable evidence pipeline for BCB 85/2021, ANPD 24h, Open Finance. Replaces consultant + spreadsheet workflows. MIT, fork of AiSOC.

Evidence-first reverse engineering workbench with bounded binary analysis, extensible static adapters, MCP and reproducible local investigations.