← All launches
0 Report

LogTriage

by FastDrop

MCP Verified 1 hour ago Registry import free

Security log tools: Windows/Entra error codes, log explainer, IP blocklists, attack scans

Security log tools: Windows/Entra error codes, log explainer, IP blocklists, attack scans Official MCP Registry: io.github.logtriage-cyber/logtriage@1.0.0. Remote endpoint: https://api.logtriage.app/mcp

Problem it solves

Discoverable MCP server listed in the official MCP Registry.

How it's different

Remote MCP endpoint ingested from the official registry and probed by FastDrop.

Ingested from the official MCP Registry

FastDrop pulled this entry from the official MCP Registry as io.github.logtriage-cyber/logtriage and probed the endpoint. The maker did not submit it, so the outbound link is not endorsed and the description is not theirs.

If this is your server, claim the listing to edit it and take ownership. The registry index lists everything else still awaiting a probe.

Claim this listing

Tools this endpoint exposes

Read directly from the endpoint on 5 Nov 2026. Not supplied by the maker.

  • lookup_error_code

    Explains Microsoft authentication error codes from Microsoft's official tables: Entra ID sign-in errors (AADSTS50126, or the bare 50126), Windows NTSTATUS codes as logged in events 4625/4776 (0xC00000

  • explain_log_record

    Identifies the format of one log record (access-log line, syslog/auth.log line, Windows event XML, CloudTrail, Entra ID, CrowdStrike, firewall, CEF/LEEF and more) and lists every field with what it me

  • check_ip_blocklists

    Checks IPv4 addresses against 12 free public blocklists (IPsum, FireHOL levels 1-3, Spamhaus DROP, blocklist.de, CINS Army, GreenSnow, DShield, ET compromised, Tor exits), the same lists as logtriage.

  • scan_log_for_attacks

    Detects the log format (50+ formats: web access logs, auth.log, Windows events, Sysmon, CloudTrail, Entra ID, Okta, Kubernetes audit, firewalls, EDR exports and more) and runs LogTriage's deterministi

  • search_reference

    Finds LogTriage's reference pages for an investigation: Windows Security event IDs, Entra AADSTS, NTSTATUS and Kerberos codes, AWS CloudTrail events (ConsoleLogin, AssumeRole...), CrowdStrike Falcon e

  • analyze_log_file

    Runs LogTriage's full analysis on a log: parsing (50+ formats), threat-intelligence enrichment of addresses, user agents and hashes, risk scoring, attack-pattern detection and an AI-written incident r

  • get_analysis

    Returns the status and, once complete, the incident report of an analysis started with analyze_log_file: severity, attack pattern, executive summary, detected patterns, indicators, MITRE ATT&CK techni

Is this tool yours?

Claim this listing, then prove you own the domain with one DNS record: once it matches, the listing is yours right away.

Sign in to claim this listing

Matched on shared tags and the tools their MCP servers actually expose.

Reviews

Sign in to leave a review.

No reviews yet.

Comments

Sign in to join the discussion.

No comments yet - start the discussion.