Schema | EvidenceGene Court

EvidenceGene Court

Describes the environment variables required to run the server.

Name	Required	Description	Default
`EGC_LLM_BASE_URL`	No	Base URL for the LLM endpoint. Defaults to LM Studio at http://localhost:1234/v1	http://localhost:1234/v1

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Features and capabilities supported by this server

Protocol revision2025-11-25

Capability	Details
`tools`	{ "listChanged": false }
`prompts`	{ "listChanged": false }
`resources`	{ "subscribe": false, "listChanged": false }
`experimental`	{}

Functions exposed to the LLM to take actions

Name	Description
verify_image_integrityA	Hash an evidence image (sha256/md5) for chain-of-custody. Run this first.
vol_pslistC	Volatility3 windows.pslist — processes from the active process list.
vol_psscanA	Volatility3 windows.psscan — pool-scanned processes (finds hidden/terminated).
vol_netscanC	Volatility3 windows.netscan — network connections and listeners from memory.
vol_cmdlineC	Volatility3 windows.cmdline — process command lines from memory.
vol_malfindC	Volatility3 windows.malfind — injected/suspicious executable memory regions.
disk_partitionsC	Sleuth Kit mmls — partition table of a disk image (E01/raw).
disk_file_timelineB	Sleuth Kit fls — recursive file timeline from a partition (MACB timestamps). Use path_filter (substring) to focus, e.g. 'Windows/Prefetch' or 'Users'.
cross_validate_processesA	Compare pslist vs psscan artifacts; returns ghost processes (hidden candidates).
artifact_queryB	Page through or search the full rows of a previously recorded artifact.
verify_audit_chainA	Replay the SHA-256 audit chain; proves the investigation log is untampered.

Interactive templates invoked by user choice

Name	Description
No prompts

Contextual data attached and managed by the client

Name	Description
No resources

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/FUYOH666/evidencegene-court'

If you have feedback or need assistance with the MCP directory API, please join our Discord server