$ loading_
Interact with Velociraptor for DFIR queries, client management, hunts, and artifact collection.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "Velociraptor MCP Server" yet — see the docs or source repo.
Use the Velociraptor MCP Server to run a VQL query that finds clients connected to suspicious external IPs in the last 24 hours, and return hostname, IP, timestamp, and related process details.
A forensic query result list of suspicious connections with host and process context.
Use the Velociraptor MCP Server to create a hunt across all Windows endpoints to collect recent autoruns, suspicious scheduled tasks, and persistence-related artifacts, then provide the hunt ID.
Created hunt details with the task identifier and target collection scope.
Use the Velociraptor MCP Server to list clients that have been offline for more than 7 days, group them by department or tag, and mark high-risk hosts for priority review.
A list of offline clients, grouped results, and priority flags for high-risk hosts.
Connect to VirusTotal for malware checks, URL scans, and threat intelligence.
Query vRx security data read-only for vulnerability, endpoint, and patch management.
Unofficial MCP tool for inspecting and diagnosing Viam robotics fleets.
Analyze URLs, files, IPs, and domains with VirusTotal security reports.
Analyze URLs, files, IPs, and domains for faster security investigation.
Analyze disk images with AI through MCP for fast forensic investigation.