A
license-
qualityC
maintenanceEnables blockchain forensics across multiple chains (Base, Ethereum, Arbitrum, Optimism, Polygon) with tools to trace transactions, cluster addresses, detect anomalies, and identify mixer usage.
MIT
Why this server?
Blockchain forensics for tracing transactions and detecting anomalies, relevant to financial crime investigation.
Why this server?
Adversarial DFIR with AI agents (Prosecutor, Defender, Arbiter) for investigating digital evidence, directly related to crime analysis.
AlicenseBqualityAmaintenanceAdversarial autonomous DFIR. A court of AI agents — Prosecutor, Defender, Arbiter — investigates disk and memory evidence through a typed, read-only MCP server.111MITWhy this server?
Dark web and threat intelligence including ransomware tracking and exploit search, crucial for cybercrime investigations.
AlicenseAqualityAmaintenanceDark web & threat intelligence for AI agents. HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis — unified into a single MCP server.246643306MITWhy this server?
Provides incident triage tools for evidence retrieval and ticket workflows, aiding in crime response.
AlicenseCqualityCmaintenanceIncident Triage MCP is a Model Context Protocol (MCP) server for incident triage. It provides safe, auditable tools for evidence retrieval, deterministic summaries, ticket workflows, and notifications.28Apache 2.0Why this server?
Comprehensive forensic analysis of files and browser artifacts, supporting crime scene reconstruction.
AlicenseBqualityCmaintenanceComprehensive forensic analysis MCP server enabling AI agents to analyze files, Chromium and Firefox browser artifacts, with VirusTotal, DIE, Binwalk integrations.51MITWhy this server?
Governed DFIR server with forensic tools (Volatility, Plaso, etc.) for digital crime investigation.
Alicense-qualityAmaintenanceA governed MCP server for digital-forensics and incident-response (DFIR) work, exposing curated forensic tools (Volatility 3, Plaso, RegRipper, etc.) through a single FastMCP HTTP endpoint with bearer-token authentication and tamper-evident audit logging.MITWhy this server?
Autonomous DFIR with tools for disk, memory, and registry analysis, tailored for finding evidence of crime.
Alicense-qualityBmaintenanceEnables autonomous digital forensics and incident response through 21 typed forensic tools covering disk, memory, registry, network, timeline, carving, and patterns, integrated with AI-driven reasoning and self-correction.MITWhy this server?
On-chain investigation tools for Solana, detecting wash trading and tracing funds, relevant to financial crime.
FlicenseAqualityDmaintenanceOn-chain investigation and analysis tools for Solana blockchain, enabling detection of wash trading, funding source tracing, holder concentration analysis, and MEV/bundle activity identification.43Why this server?
Read-only forensic analysis of evidence files using utilities like Volatility, aiding in crime investigation.
Flicense-qualityCmaintenanceMCP server for read-only forensic analysis of evidence files using local utilities (file, ExifTool, strings, Volatility).