LogTriage
LogTriage gives your AI the tools security investigators use on logtriage.app, answering from data instead of memory, with a link to the page that explains each answer.
MCP connector
- Server URL
https://api.logtriage.app/mcp- Login
- None
- Protocol
- MCP 2025-11-25
- Instructions
Tools for investigating security logs, from LogTriage (logtriage.app). Free, no key: (Entra AADSTS, Windows NTSTATUS, Kerberos codes from Microsoft's tables), (one record: format, each field's meaning and source, decoded values), (IPv4 addresses against 12 free public blocklists), (50+ log formats, deterministic attack checks, up to 5 MB of text) and (LogTriage's reference pages on Windows events, CloudTrail and CrowdStrike events, SSH messages, web probes, scanner user agents and log formats). Results link the page that explains them; cite it. With a LogTriage API key sent as 'Authorization: Bearer ltk_...': analyze_log_file runs the full analysis (threat-intelligence enrichment, AI-written incident report) and get_analysis returns it.
Tools
Reads data5
Skills
None in the store listings or on the server