{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_ateby5k72t6t","handle":"velociraptor-mcp-server","url":"https://wellknown.network/agents/velociraptor-mcp-server","links":{"self":"https://wellknown.network/agents/velociraptor-mcp-server/record.json","html":"https://wellknown.network/agents/velociraptor-mcp-server","markdown":"https://wellknown.network/agents/velociraptor-mcp-server/record.md","api":"https://wellknown.network/api/v1/agents/velociraptor-mcp-server","status":"https://wellknown.network/api/v1/agents/velociraptor-mcp-server/status","claim":"https://wellknown.network/agents/velociraptor-mcp-server/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/velociraptor-mcp-server/claim.json","badge":"https://wellknown.network/agents/velociraptor-mcp-server/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:velociraptor-mcp-server","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"velociraptor-mcp-server","summary":"FastMCP server that exposes Velociraptor APIs.","description":"# Velociraptor MCP Server\n\n## Quickstart\n- Install the published package: `python3 -m venv .venv && . .venv/bin/activate && pip install velociraptor-mcp-server`\n- Run (needs mTLS config): `velociraptor-mcp --config /absolute/path/to/velociraptor_lab/volumes/api/api.config.yaml`\n- Codex one-liner (installed package):\n  ```sh\n  codex mcp add velociraptor \\\n    --env VELOCIRAPTOR_API_CONFIG=/absolute/path/to/velociraptor_lab/volumes/api/api.config.yaml \\\n    -- velociraptor-mcp --config /absolute/path/to/velociraptor_lab/volumes/api/api.config.yaml \\\n    --log-level INFO --server-name velociraptor-mcp\n  ```\n\nA FastMCP-based server that exposes Velociraptor capabilities (VQL queries, hunts, artifacts, VFS/file ops, monitoring, alerts) over the MCP protocol for use with Codex/ChatGPT-style agents.\n\n## Prerequisites\n- Python 3.10+\n- Podman (or Docker) if you want to use the included `velociraptor_lab` for local testing.\n- Generated Velociraptor mTLS API config (`api.config.yaml`) – the lab can generate this for you.\n\n## Install / Develop\n- From PyPI: `pip install velociraptor-mcp-server`\n- Runtime (source): `pip install .`\n- Dev/editable: `pip install -e .[dev]`\n- Legacy: `pip install -r requirements.txt`\n- Pre-commit: `pre-commit install` then `pre-commit run --all-files`\n\nMake targets (see `Makefile`): `make dev`, `make test`, `make build`, `make health`, `make release VERSION=0.1.6`.\n\n## Running the MCP server\nAfter installing, you can either call the module directly or use the installed console script:\n```sh\n# installed entry point\nvelociraptor-mcp --config velociraptor_lab/volumes/api/api.config.yaml \\\n  --log-level INFO --server-name velociraptor-mcp\n\n# or, from source\npython3 main.py --config velociraptor_lab/volumes/api/api.config.yaml \\\n  --log-level INFO --server-name velociraptor-mcp\n```\nOptions:\n- `--config` or env `VELOCIRAPTOR_API_CONFIG`: path to `api.config.yaml` (default `volumes/api/api.config.yaml`)\n- `--log-level` or env `MCP_LOG_LEVEL` (default `INFO…","publisher":{"name":"Velociraptor MCP maintainers","url":null},"homepage":null,"repository":null,"version":"0.1.10","license":"MIT","protocols":["mcp"],"tags":["velociraptor","mcp","fastmcp","ir","dfir","forensics"],"pricing":null,"endpoints":[{"url":"pypi:velociraptor-mcp-server","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","summary":"pypi","version":"pypi","description":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.768,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"velociraptor-mcp-server","registry":"pypi","observedAt":"2026-09-10T15:25:07.225Z","publishedAt":"2025-12-03T06:37:46.213311Z","latestVersion":"0.1.10"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"velociraptor-mcp-server","url":"https://pypi.org/project/velociraptor-mcp-server/","firstSeenAt":"2026-09-10T15:23:17.576Z","fetchedAt":"2026-09-10T15:23:17.576Z","normalizedAt":"2026-09-10T15:23:17.576Z"}]},"firstSeenAt":"2026-09-10T15:23:17.576Z","updatedAt":"2026-09-10T15:25:07.225Z"}