"Resources or information on analysis techniques or methods" matching MCP servers:

Provides real-time system metrics and information through a Model Context Protocol interface, enabling access to CPU usage, memory statistics, disk information, network status, and running processes.

Collects page performance metrics using Playwright, CDP, and Lighthouse, and returns a normalized PerformanceReport.

MCP server for On-Call Health burnout analysis. Connects AI assistants to your on-call data for workload insights.

MCP server that diagnoses ML model regressions by correlating drift reports, eval runs, and deploy logs, providing evidence-cited incident reports through a set of investigation tools.

Enables AI assistants to search Elasticsearch logs, retrieve log details, analyze service health, scan local codebases for APIs, and create Kibana dashboards.

Provides cost analysis of AI agent usage by previewing scrubbed metadata before upload and analyzing spend, cache-hit rates, and waste recovery through a local or remote server.

Provides AI agents with real-time ground truth about what's actually running on the machine, including live agent sessions, listening TCP ports, loaded daemons, and system stats. It reads directly from the OS via fixed commands, ensuring agents never rely on stale docs or transcripts.

Lets you use Claude Desktop, or any MCP Client, to use natural language to accomplish things on your Cloudflare account.

MCP server that wraps Drain3 for streaming log template mining, read-only matching, parameter extraction, and model persistence, exposing tools and resources to train on logs and query learned templates.

Enables observation-only system inspection through MCP, exposing system identity, resources, process summary, and network summary without any mutation or command execution.

A task manager's view of a Windows or Linux PC for AI assistants: processes, per-core CPU and who ran on it, disks and the files they serve, network connections and DNS lookups, GPUs, sensors, services, stutters and a 7-day history. Actions (ending or suspending processes, controlling services, memory dumps) are allowed kind by kind, and it runs locally over stdio or on 127.0.0.1 only.

Lets an AI assistant check on a ZimaBlade or any Docker host over plain SSH (load, top processes, container stats, logs, disk) and restart only allowlisted containers. Nothing to install on the box.

Enables AI agents and SREs to diagnose Kubernetes incidents, perform root cause analysis, and generate safety-guardrailed GitOps remediation patches or kubectl commands. It supports live clusters, Alertmanager webhooks, and offline simulation scenarios.

Provides read-only monitoring, inspection, and root-cause analysis of Azure Data Factory resources, including factories, pipelines, and pipeline runs, through MCP tools.

Enables AI agents to investigate Splunk exports or live queries using deterministic detectors and an iterative analysis loop, all running locally without data leaving the machine.

Enables diagnosing Kubernetes clusters without creating or changing cluster objects, with tools to inspect health, workloads, events, storage, RBAC, custom resources, logs, and configuration.

Enables querying Wazuh 5 agents, groups, cluster status, MITRE techniques, events, findings, and vulnerability state through the manager and indexer APIs, with optional agent restart when read-only mode is disabled.

Enables LLMs to directly query a Matomo analytics instance, execute reporting methods, fetch historical trends, report metadata, and dynamically generated chart images through typed MCP tools.

Enables interaction with Google Cloud services including billing cost analysis, log querying, and metrics monitoring through natural language commands. Provides comprehensive tools for managing GCP resources, analyzing costs, detecting anomalies, and retrieving operational insights.

Enables an MCP-capable agent to operate a heterogeneous cluster of Debian/Armbian Linux nodes over SSH from a single inventory, inspecting status and logs, managing packages, services, files, storage and NFS, and deploying new capabilities to nodes through installable modules. Built-in cluster tools fan out to nodes by explicit names, roles or tags with bounded concurrency, while modules can be installed on compatible nodes and run on demand or as systemd services.

Enables MCP clients such as Claude and Cursor to query Vercel Web Analytics across all your projects, covering visitors, sources, campaigns, Core Web Vitals, cross-site traffic, alerts and exportable board reports. It also supports annotations, resources and guided prompts for weekly briefs and traffic-drop investigations via a hosted or local server.

Enables Windows event log forensics by wrapping Hayabusa, offering EVTX scanning, Sigma rule exploration, ATT&CK coverage analysis, and detection engineering resources.

Enables operators and MCP clients to perform read-only, multi-cluster Kubernetes diagnostics by correlating deployment inventory, approved Prometheus metrics, firing alerts, and reusable troubleshooting skills without executing cluster commands or modifying workloads. It exposes tools, resources, and prompts for deployment health checks, metric queries, alert inspection, and skill discovery.

Enables AI agents to read incidents, alerts, on-call schedules, teams, severities and API user info, and — on explicit request — declare, update and resolve incidents, manage alerts, and create or update teams through the Rootly REST API. It is stateless and multi-tenant, taking the API token as a per-request HTTP header that is never stored.

Enables local analysis of classic libpcap capture files through MCP tools covering DNS, DHCP, ICMP, TCP connections, anomalies, retransmissions, traffic flows, SIP calls, and capture summaries without network access or API keys.

Enables on-call database diagnostics: it classifies load pressure, traces root causes with hypothesis-evidence-confidence, detects blocking and lock chains, scores health across a dimension tree, and renders deliverable incident reports. Works from symptom text alone with no database connection or history required (Tier0), escalating to snapshot-based and trend-based analysis as observations accumulate.

Provides Claude AI assistants with focused monitoring tools for n8n workflow execution analysis, including active workflow listing, execution history with KPIs, and detailed failure information.

Enables Cursor and Claude Code to inspect Kibana APM data—services, transaction and error groups, trace samples, and trace waterfalls—through Kibana's internal APM APIs. It focuses on Kibana-computed aggregates rather than raw logs or Elasticsearch documents.

Enables local, read-only analysis of Codex and Claude Code conversations through ten MCP tools for browsing sessions, inspecting tokens and tools, and comparing sessions without accounts or cloud services.

A fully compliant MCP gateway and registry that federates any MCP, A2A, or REST/gRPC API behind one unified endpoint, adding centralized discovery, auth, rate limiting, retries, and OpenTelemetry observability. It virtualizes legacy services and agents into MCP-compliant tools, prompts, and resources, with 40+ plugins extending transports and protocols.

Analyzes PCAP/PCAPNG network capture files to detect port scanning techniques (SYN, FIN, Xmas), classify scan patterns, and enrich suspicious IP addresses with threat intelligence data. Provides comprehensive network security analysis through natural language interactions.

Provides secure, multi-user access to Oracle Database for MCP clients, enabling SQL querying, execution, schema exploration, and performance analysis through various connection methods including TNS, JDBC, and TCPS.

Enables agents to detect drift anomalies with CUSUM, forecast trends using Holt linear methods, and automatically trip a circuit breaker to protect workflows.

Enables assistants to securely work on a Chest via personal access token: reading tool logs, builds, and databases, editing rows and variables, and installing or linking tools, with every write requiring a dry run and human confirmation.

Provides read-only access to Tactical RMM, enabling agent searches, detailed agent information, audit log queries, and execution of information-gathering PowerShell scripts on agents, with Entra ID authentication and a strict read-only guard.

Enables an agent to launch or attach to a running application and profile startup phases, CPU, memory, memory bandwidth, GPU and network activity on one live timeline, capturing call stacks and hot functions. It then ties the measured hotspots to the user's own code and reports which interactions cost time or retain memory.

Enables comprehensive analysis of Apache Spark event logs from S3, HTTP, or local sources, providing performance metrics, resource monitoring, shuffle analysis, and automated optimization recommendations with interactive HTML reports.

An MCP server for the RocketCyber Managed SOC platform that provides read-only access to security data including incidents, agents, and events. It enables users to monitor and query security information through 10 specialized tools and resources.

Enables GPU profiling and performance analysis via NVIDIA Nsight Systems, allowing agents to profile binaries and aggregate statistics for kernels, memory copies, and NVTX ranges. It supports advanced analysis through interval tree construction and structural queries on profiling reports.

Enables coding agents to trace, profile, and burn down hotspots in application and native code, GPU kernels, and inference stacks by turning explicit local artifacts or commands into bounded, provenance-typed runtime evidence. Exposes named analysis and capture tools over stdio with optional durable preservation, without requiring workspace setup or project configuration.