1. Conduid
  2. Security
  3. Wintools MCP
MCP server · Security

Wintools MCP

by · github.com/AppliedIR/wintools-mcp

Valhuntir Windows forensic tool execution via MCP

Unclaimed dfirforensicsincident-responsemcpmodel-context-protocolwindows-forensics
InstallView source
34Low

Scored 28 days ago · breakdown

About Wintools MCP

Wintools MCP is an MCP server published by AppliedIR in the Security category: valhuntir Windows forensic tool execution via MCP.

The repository has 9 stars and 0 forks, with the last commit 6 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/AppliedIR/wintools-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Wintools MCP

Powered by Claude · Grounded in docs

I know everything about Wintools MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.6.4v0.6.4 · 11 Oct 2026Valhuntir 0.6.4 signs every approval and rejection with the examiner's own key, and `vhir review --findings --verify` checks them without a passphrase. Each finding's evidence is traced back to registered evidence and graded, in the…
v0.6.3v0.6.3 · 6 Oct 2026Valhuntir 0.6.3 is a bug-fix release; wintools-mcp changes only its version. For Claude Code on the SIFT workstation, a hook now checks Bash commands and blocks common ways of deleting or overwriting case records, audit logs and evidence…
v0.6.2v0.6.2 · 4 Oct 2026Full Changelog**: https://github.com/AppliedIR/wintools-mcp/compare/v0.6.1...v0.6.2
v0.6.1v0.6.1 · 16 Apr 2026What's New Per-artifact provenance grading with evidence chain display in Examiner Portal Provenance chain tooltips — hover any chain step for full audit detail (command, timing, input files, SHA-256) `vhir restore` — restore cases from…
v0.6.0v0.6.0 · 7 Apr 2026What's New opensearch-mcp: programmatic ingestion of major forensic artifacts into OpenSearch, reducing LLM token usage while providing structured access to processed evidence Improved forensic knowledge guidance and MCP response hints to…
Questions

About Wintools MCP

How do I install Wintools MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Wintools MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Wintools MCP still maintained?

Yes — the latest release is v0.6.4 (11 Oct 2026), and the last commit was 6 days ago. The repository has 9 stars.