"Cargo Doc" matching MCP servers:

Exposes an observability REST API as MCP tools, enabling incident investigation through automated correlation of deploys with errors, log and metrics queries.

Enables read-only querying of LangSmith traces including runs, children, and URLs without extra instrumentation.

Enables AI-driven SOC investigations by providing automated Splunk querying, threat intelligence enrichment, and response actions through natural language. Includes tools for IP pivoting, lateral movement detection, and label harvesting.

Unified SIEM MCP gateway for AI-driven SOC operations and threat hunting across Azure Sentinel, Splunk, Wazuh, IBM QRadar, and Securonix.

Provides financial audit reporting and ledger query tools for AI agents, enabling generation of compliance, risk, and transaction reports and querying of transaction data, balances, and summaries from an in-memory SQLite database via MCP.

Enables read-only incident investigation by correlating IBM QRadar offenses and associated IPs with Trend Vision One Workbench alerts, endpoint activities, and detections. It produces bounded evidence reports and supports Kiro-led triage through tools such as investigate_case, investigate_offense, and investigate_vision_alert.

Enables AI-assisted SOC workflows by connecting Claude Desktop to Splunk Enterprise for security event analysis and incident response.

A read-only, OAuth 2.1-authenticated MCP server that lets Claude inspect the live state of a self-hosted server — system resources, containers, service and website health, n8n automations, video jobs, backups, repositories, error summaries, a component design system, uptime monitoring, and its own audit trail. All twenty-one tools are strictly observation-only, with no shell, file browser, SQL console, or Docker socket, so nothing can be started, stopped, deployed, or deleted.

Enables MCP-compatible clients to inspect the local machine's CPU, memory, and disk information through tools, a structured resource, and an upgrade-assessment prompt.