- Conduid
- Marketplace
- #incident-response
MCP servers tagged incident-response
146 live MCP servers tagged "incident-response", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with incident-response.
Incident Playbook Simulator Poc
A minimal Incident Playbook Simulator (PoC) that demonstrates automated incident-response flows using LLM (Gemini) and mock MCP tools. It plans, retrieves evidence, decides execut…
Glaive
Graph-Linked Adversarial Investigation & Verification Engine autonomous DFIR with architectural hallucination resistance.
Incident Lens
Open-source MCP server for agentic incident diagnosis across Prometheus, Loki, Sentry, and GitHub
Incident Command Mesh
Production reference architecture for multi-agent incident response with Google ADK, A2A, MCP-style tools, evaluation, and observability.
Sazabi
Sazabi — independent third-party profile of a public API surface, by API Evangelist. Sazabi is an AI-native observability platform that helps engineering teams find and fix produc…
Runreveal
RunReveal — independent third-party profile of a public API surface, by API Evangelist. RunReveal is a unified security log management and detection platform that replaces traditi…
Sciguard Autopilot
Scientific decision control plane powered by DataHub field lineage, deterministic policy, and evidence-gated recovery.
Investigation Reports
MCP security investigation and hunting reports — reference material for detecting and investigating agent tool activity.
Agentic Misp MCP
Workflow-first MCP server for MISP threat intelligence, with agentic IOC investigation, pivoting, reporting, and policy-gated write workflows.
Ml Oncall Agent
Multi-agent ML incident diagnosis over MCP: correlates drift reports, eval runs and deploy logs to answer 'why did last night's run regress?'. Deterministic verdict, every claim c…
Devops Agent Harness
Model-agnostic DevOps AI agent harness: policy, approvals, audit and rollback enforced outside the LLM. Works with Claude Code, OpenCode, Cursor, Copilot and any MCP client.
Nightwatch
Incident console where the AI agent's tool surface follows severity — tools mount as things get worse, unmount when they're over, and a human holds the keys. Built for the WebMCP…
Homelab Evidence MCP
Read-only stdio MCP server for cross-source homelab incident evidence (Gatus, Docker, Loki, Healthchecks).
FlowSentinel
Local-first MCP server for process-aware network visibility, PCAP analysis, and explainable behavioral threat detection in Go.
Aftermath
Assembles a provenance-labelled incident timeline from git, logs and deploy evidence — offline by default, with an MCP server front door.
FindEvil CyberSecurity
🏆 Hackathon — AI-powered threat detection & malicious pattern recognition tool for cybersecurity analysis
OpsMender AI
Open source incident response you run on your own servers. Pages the right people and lets an AI agent investigate and fix things within limits enforced in code.
Lineagepatch
A DataHub-powered incident response workflow that turns metadata context into reviewable remediation patches.
Neubird
Neubird — independent third-party profile of a public API surface, by API Evangelist. NeuBird AI is "The Production Operations Agent" — an autonomous AI SRE platform that investig…
DB Rag Agent
Incident response + analytics agent, built on the TrueForge harness. Investigates alerts with read-only tools, computes root cause in a sandbox, and stops for human approval befor…
K8s Sre Agent
Autonomous Kubernetes SRE agent in Go: nine specialist subagents over k8s-lookout diagnostics, structured findings with stable identity, and a write path where every mutation is g…
Incident Intel
MCP server wiring PagerDuty, Dynatrace, and runbook context for AI-driven incident response
Service Demo
Evidence-first MCP incident response demo integrating Splunk, a service catalog, and a service desk.
Zerosoc MCP
MCP servers, and the typed tool clients they wrap, for security operations
Eventflow Devin Integration
EventFlow Devin Integration — Azure Function alert webhook, MCP server for Log Analytics, shared schemas, demo runbook
Doctor Droid
Doctor Droid — independent third-party profile of a public API surface, by API Evangelist. Doctor Droid (DrDroid), built by Deep Sea Tech Inc., is an AI-powered SRE and on-call ag…
Devops Troubleshooter
Local Copilot/Cursor agent kit for Kubernetes RCA: identify the issue, write an evidence-backed RCA, recommend the fix — never mutate the cluster.
Pcap Analyzer MCP
pcap/pcapng analysis as an MCP server — a digest-pinned tshark runs in a network-less Podman container with the capture mounted read-only, so an agent narrows a GB-scale capture s…
Postgres Incident Toolkit
CLI for production Postgres incident response. Detects long queries, lock waits, replication lag, bloat. Read-only by design. Outputs Markdown runbooks + JSON for AI agents.
Neo Finds Evil
Read-only Neo4j graph-correlation layer extending Protocol SIFT for AI-driven DFIR — cross-host, cross-time evidence correlation exposed to a Claude Code agent via architecturally…
Slack Incident Agent
ContextOps is an AI-powered DevOps teammate inside Slack that investigates production incidents, gathers AWS logs, suggests fixes, and generates reports.
Gitmoru
Recover force-pushed GitHub branches and see what changed after a breach. Reads through the API, clones nothing, sends nothing anywhere.
Incidentgate
An AI-control evaluation harness: does a policy, monitor and human-approval chain stop an adversarial incident-response agent, and which layer does the work? Closed at a baseline…
Operator Copilot Starter
AI-powered SRE incident response agent using Claude (Anthropic) + MCP – auto-diagnoses Kafka lag, CrashLoopBackOff, and TLS expiry on live EKS clusters | 12 operational tools, app…
AI Operations Agent
Агентный анализ инцидентов для бэкенд-сервисов: workflow на LangGraph, интеграции через MCP, вызов инструментов и операции записи с подтверждением человеком
CausalOps
Policy-governed, evidence-grounded incident investigator over a synthetic microservice lab -- LangGraph, live Claude Sonnet 5, MCP tool dispatch, hosted Cloud Run/Firestore deploy…
Incident MCP Server
MCP server for on-call incident response — Go · official go-sdk · streamable HTTP · policy-enforced tools
Elastic Genai Secops
Open, AI-assisted SecOps platform on the Basic-licensed Elastic Stack: SIEM, detection rules, alert correlation, PII masking, LLM triage with human review, and a read-only MCP ser…
Autosre
Incident-response agent for a demo checkout service. Reads Dynatrace through the Dynatrace MCP server, diagnoses the fault with Gemini 3, proposes one remediation, and blocks unti…
Spoor
budgeted digest that separates root causes from echoes using trace structure.
Meridian
Context-aware incident intelligence. Turns SIEM detections into source-bound incident narratives via a Gemini-3 reasoning agent on the MetisOS protocol stack.
ProdRescue
Autonomous self-healing SRE agent pipeline that detects production incidents, diagnoses root cause, writes and tests a patch, and opens a PR — built with LangGraph, MCP, and a san…
Agentsec Agenthalt
Universal kill-switch with evidence preservation
MCP
Official OutageDeck MCP server for vendor-published cloud and SaaS status, incident timelines, and observed uptime history.
Incident MCP Server
MCP server for on-call incident response — Go · official go-sdk · streamable HTTP · policy-enforced tools
Incident Bot
No description published.