"Construct 3" matching MCP servers:

这是面向智能运维场景的 MCP 工具服务，让 Agent 能够按需检索日志内容并获取主机与应用的监控指标数据。它把实时的日志与指标证据接入 Plan-Execute-Replan 诊断流程，从而支撑自动故障排查与根因分析。

Sigma detection rule writing, validation, and pySigma-based multi-backend conversion (Splunk, Elastic, Wazuh, Kibana) via 3 MCP tools and 3 Claude Code skills, backed by a 61-rule production corpus across 11 MITRE ATT\&CK tactic categories.

Enables read-only querying and analysis of Kibana logs through a logged-in sid Cookie, including keyword/time/index searches, traceId lookups, surrounding log context, and aggregations by service, level, or host. It also validates Kibana connection status and redacts sensitive fields such as cookies, tokens, and passwords.

Enables natural language queries of the Chrome UX Report API to fetch Core Web Vitals (LCP, INP, CLS, FCP, TTFB), compare form factors, benchmark pages against site averages, and analyze up to 40 weeks of performance trends.

MCP server for Healthchecks: inspect, create and adjust cron and uptime checks, and read why one failed

An MCP server that provides cost and reliability observability for LLM and agent workflows. It records model calls and allows querying and aggregating telemetry data through MCP tools.

Provides cost analysis of AI agent usage by previewing scrubbed metadata before upload and analyzing spend, cache-hit rates, and waste recovery through a local or remote server.

Enables natural-language diagnosis of Linux system issues by providing sandboxed, typed tools for system, service, filesystem, and git inspection, with human approval for mutating actions.

Enables causal root cause analysis with 56 tools covering causal graph construction, 10 RCA model families plus 3 dedicated PyRCA algorithms (Salesforce PyRCA, BSD-3-Clause), multi-model consensus, and PDF/HTML/Excel/Markdown report generation. Works with Claude, Ollama, Groq, OpenAI, Gemini, LangChain, Cursor — 10 providers.

Exposes a Raspberry Pi homelab's systemd service health, disk usage, CPU temperature, and LAN game-server status as read-only MCP tools, letting MCP clients answer questions like "how's the homelab doing?" without SSHing in manually.

Provides a standardized MCP interface for querying Graylog logs, enabling AI agents to search, diagnose, and correlate runtime logs with code via configurable profiles.

Enables AI assistants to search Elasticsearch logs, retrieve log details, analyze service health, scan local codebases for APIs, and create Kibana dashboards.

Enables AI agents to monitor Docker containers, system resources, ports, and logs in real-time.

Semantic log clustering for incident triage, exposed as an MCP server.

Enables AI agents such as Cursor and Claude Code to inspect local log files through MCP tools for tailing, searching, filtering, statistics, and root-cause diagnosis using local Ollama or a built-in rule engine.

Enables interacting with the HetrixTools API v3 to manage blacklists, uptime monitors, status pages, scheduled maintenance, and server agents via natural language.

Enables LLM clients to run structured, bottom-up network diagnostics across OSI Layers 1–3, including Wi-Fi telemetry, ping checks, and runbook-based remediation.

An MCP server that gives Bob direct access to your Grafana instance — dashboards, datasources, queries, alerting rules, and more.

Enables AI assistants to query and analyze errors from Bugsink self-hosted error tracking instances. Supports listing projects, teams, issues, and viewing detailed error events with stacktraces.

Exposes Wazuh SIEM data and actions—including agents, alerts, vulnerabilities, rules, decoders, active response, and Wazuh 5 Sigma rules, Detectors, and content promotion—as Model Context Protocol tools that LLM clients can call over HTTP.