LogTriage
by FastDrop
Security log tools: Windows/Entra error codes, log explainer, IP blocklists, attack scans
Security log tools: Windows/Entra error codes, log explainer, IP blocklists, attack scans Official MCP Registry: io.github.logtriage-cyber/logtriage@1.0.0. Remote endpoint: https://api.logtriage.app/mcp
Problem it solves
Discoverable MCP server listed in the official MCP Registry.
How it's different
Remote MCP endpoint ingested from the official registry and probed by FastDrop.
Ingested from the official MCP Registry
FastDrop pulled this entry from the official MCP Registry as io.github.logtriage-cyber/logtriage and probed the endpoint. The maker did not submit it, so the outbound link is not endorsed
and the description is not theirs.
If this is your server, claim the listing to edit it and take ownership. The registry index lists everything else still awaiting a probe.
Claim this listingTools this endpoint exposes
Read directly from the endpoint on 5 Nov 2026. Not supplied by the maker.
lookup_error_codeExplains Microsoft authentication error codes from Microsoft's official tables: Entra ID sign-in errors (AADSTS50126, or the bare 50126), Windows NTSTATUS codes as logged in events 4625/4776 (0xC00000
explain_log_recordIdentifies the format of one log record (access-log line, syslog/auth.log line, Windows event XML, CloudTrail, Entra ID, CrowdStrike, firewall, CEF/LEEF and more) and lists every field with what it me
check_ip_blocklistsChecks IPv4 addresses against 12 free public blocklists (IPsum, FireHOL levels 1-3, Spamhaus DROP, blocklist.de, CINS Army, GreenSnow, DShield, ET compromised, Tor exits), the same lists as logtriage.
scan_log_for_attacksDetects the log format (50+ formats: web access logs, auth.log, Windows events, Sysmon, CloudTrail, Entra ID, Okta, Kubernetes audit, firewalls, EDR exports and more) and runs LogTriage's deterministi
search_referenceFinds LogTriage's reference pages for an investigation: Windows Security event IDs, Entra AADSTS, NTSTATUS and Kerberos codes, AWS CloudTrail events (ConsoleLogin, AssumeRole...), CrowdStrike Falcon e
analyze_log_fileRuns LogTriage's full analysis on a log: parsing (50+ formats), threat-intelligence enrichment of addresses, user agents and hashes, risk scoring, attack-pattern detection and an AI-written incident r
get_analysisReturns the status and, once complete, the incident report of an analysis started with analyze_log_file: severity, attack pattern, executive summary, detected patterns, indicators, MITRE ATT&CK techni
Is this tool yours?
Claim this listing, then prove you own the domain with one DNS record: once it matches, the listing is yours right away.
Sign in to claim this listingSimilar launches
Matched on shared tags and the tools their MCP servers actually expose.
Shares tags: MCP server
Shares tags: MCP server
Shares tags: MCP server
Shares tags: MCP server
Shares tags: MCP server
Shares tags: MCP server
Reviews
Sign in to leave a review.
No reviews yet.
Comments
Sign in to join the discussion.
No comments yet - start the discussion.