# thomasxm/CrowdSentinel MCP Server

Source: https://glimind.com/server/glama%2Fthomasxm%2Fcrowdsentinel-mcp-server
Registry id: `glama/thomasxm/crowdsentinel-mcp-server`
Status: unknown

## Tools (11)

- `build_unified_timeline`: Build unified timelines from multiple data sources
- `correlate_by_time`: Correlate events across sources by time
- `correlate_siem_with_endpoint`: Validate SIEM findings on endpoints via cross-correlation
- `endpoint_hunt_from_ioc`: Hunt endpoints based on a specific indicator of compromise
- `endpoint_to_siem_pivot`: Pivot from endpoint IoCs to fleet-wide SIEM searches
- `velociraptor_autoruns`: Collect autorun persistence mechanisms from endpoints
- `velociraptor_client_info`: Resolve hostnames and get client information from Velociraptor
- `velociraptor_list_artifacts`: Discover available Velociraptor artifacts
- `velociraptor_list_clients`: Enumerate enrolled endpoints in Velociraptor
- `velociraptor_scheduled_tasks`: Collect scheduled task persistence mechanisms from endpoints
- `velociraptor_services`: Collect service persistence mechanisms from endpoints

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.