-
license-
quality-
maintenanceEnables blockchain forensics across multiple chains (Base, Ethereum, Arbitrum, Optimism, Polygon) with tools to trace transactions, cluster addresses, detect anomalies, and identify mixer usage.
Last updated
Why this server?
Blockchain forensics for tracing transactions and detecting anomalies, relevant to financial crime investigation.
Why this server?
Adversarial DFIR with AI agents (Prosecutor, Defender, Arbiter) for investigating digital evidence, directly related to crime analysis.
Alicense-qualityAmaintenanceAdversarial autonomous DFIR. A court of AI agents — Prosecutor, Defender, Arbiter — investigates disk and memory evidence through a typed, read-only MCP server.Last updated1MITWhy this server?
Dark web and threat intelligence including ransomware tracking and exploit search, crucial for cybercrime investigations.
AlicenseAqualityAmaintenanceDark web & threat intelligence for AI agents. HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis — unified into a single MCP server.Last updated546647261MITWhy this server?
Provides incident triage tools for evidence retrieval and ticket workflows, aiding in crime response.
AlicenseCqualityCmaintenanceIncident Triage MCP is a Model Context Protocol (MCP) server for incident triage. It provides safe, auditable tools for evidence retrieval, deterministic summaries, ticket workflows, and notifications.Last updated28Apache 2.0Why this server?
Comprehensive forensic analysis of files and browser artifacts, supporting crime scene reconstruction.
Alicense-qualityCmaintenanceComprehensive forensic analysis MCP server enabling AI agents to analyze files, Chromium and Firefox browser artifacts, with VirusTotal, DIE, Binwalk integrations.Last updatedMITWhy this server?
Governed DFIR server with forensic tools (Volatility, Plaso, etc.) for digital crime investigation.
Alicense-qualityAmaintenanceA governed MCP server for digital-forensics and incident-response (DFIR) work, exposing curated forensic tools (Volatility 3, Plaso, RegRipper, etc.) through a single FastMCP HTTP endpoint with bearer-token authentication and tamper-evident audit logging.Last updatedMITWhy this server?
Autonomous DFIR with tools for disk, memory, and registry analysis, tailored for finding evidence of crime.
Alicense-qualityBmaintenanceEnables autonomous digital forensics and incident response through 21 typed forensic tools covering disk, memory, registry, network, timeline, carving, and patterns, integrated with AI-driven reasoning and self-correction.Last updatedMITWhy this server?
On-chain investigation tools for Solana, detecting wash trading and tracing funds, relevant to financial crime.
Flicense-qualityDmaintenanceOn-chain investigation and analysis tools for Solana blockchain, enabling detection of wash trading, funding source tracing, holder concentration analysis, and MEV/bundle activity identification.Last updated3Why this server?
Read-only forensic analysis of evidence files using utilities like Volatility, aiding in crime investigation.
Flicense-qualityCmaintenanceMCP server for read-only forensic analysis of evidence files using local utilities (file, ExifTool, strings, Volatility).Last updated