bots.st/logtriage
LogTriage
Explain security log records and error codes
1876 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 5
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://api.logtriage.app/mcp
What it can do
| Tool | What it says it does |
|---|---|
check_ip_blocklists | Checks IPv4 addresses against 12 free public blocklists (IPsum, FireHOL levels 1-3, Spamhaus DROP, blocklist.de, CINS Army, GreenSnow, DShield, ET compromised, Tor exits), the same lists as logtriage.app's IP blocklist checker. Accepts a list of addresses or any text containing them (log lines… |
explain_log_record | Identifies the format of one log record (access-log line, syslog/auth.log line, Windows event XML, CloudTrail, Entra ID, CrowdStrike, firewall, CEF/LEEF and more) and lists every field with what it means and where that meaning comes from (LogTriage's reference pages or the vendor's published… |
lookup_error_code | Explains Microsoft authentication error codes from Microsoft's official tables: Entra ID sign-in errors (AADSTS50126, or the bare 50126), Windows NTSTATUS codes as logged in events 4625/4776 (0xC000006A, C000006A, or decimal 3221225578 / -1073741718), Kerberos failure codes from events… |
scan_log_for_attacks | Detects the log format (50+ formats: web access logs, auth.log, Windows events, Sysmon, CloudTrail, Entra ID, Okta, Kubernetes audit, firewalls, EDR exports and more) and runs LogTriage's deterministic attack checks: brute force and password spraying, logins after failures, web scanning and… |
search_reference | Finds LogTriage's reference pages for an investigation: Windows Security event IDs, Entra AADSTS, NTSTATUS and Kerberos codes, AWS CloudTrail events (ConsoleLogin, AssumeRole...), CrowdStrike Falcon events (ProcessRollup2...), sshd/PAM log messages, web scanner probes, scanner user agents, log… |
In its maker's words
Security log tools: Windows/Entra error codes, log explainer, IP blocklists, attack scans
- Website
- logtriage.app/tools/mcp-server
- Publisher
- logtriage-cyber
- Listed from
- the official MCP Registry as
io.github.logtriage-cyber/logtriage - Version
- 1.0.0, updated 5 Nov 2026
- Kinds of work
- Security and trust, Search and research, Documents and files
The domain it lives on
- logtriage.app
- registered 10 Jun 2026 (5 months ago), at CloudFlare, Inc., its home page is a working site
From our own crawl of domain names: registry records and the home page as our crawler last saw it.
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 1876 ms | |
| Answered | 2501 ms | |
| Answered | 1532 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.