What authentication is required?
An API token set via the `AIR_API_TOKEN` environment variable. The server uses this for all Binalyze AIR API calls.
Binalyze AIR MCP Server
@binalyze
Basic information
About Binalyze AIR MCP Server
Binalyze AIR MCP Server
Binalyze AIR MCP Server config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"air-mcp": {
"command": "npx",
"args": [
"-y",
"@smithery/cli@latest",
"install",
"@binalyze/air-mcp",
"--client",
"claude",
"--key",
"{smithery_key}"
]
}
}
}Binalyze AIR MCP Server tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
Fetch the live tool list by running this server in a temporary sandbox using the button above.
Overview
What is Binalyze AIR MCP Server?
A Node.js server implementing the Model Context Protocol (MCP) for Binalyze AIR, enabling natural language interaction with AIR's digital forensics and incident response capabilities. It bridges Large Language Models (LLMs) with the Binalyze AIR platform, allowing users to manage assets, cases, tasks, and more without writing code or learning complex APIs.
How to use Binalyze AIR MCP Server?
Install via npm (npm install @binalyze/air-mcp) or use npx -y @binalyze/air-mcp in an MCP client like Claude Desktop or Cursor. Configure AIR_HOST (your API host) and AIR_API_TOKEN environment variables, then issue natural language commands such as "List all assets in the system" or "Assign an acquisition task to endpoint 123abc."
Key features of Binalyze AIR MCP Server
- Asset management with details and tasks
- Evidence acquisition and baseline comparison
- Case creation, notes, and lifecycle management
- Policy and triage rule management
- Evidence repository configuration (SMB, SFTP, FTPS, Azure, S3)
- User and organization administration
Use cases of Binalyze AIR MCP Server
- Security analysts querying asset inventory and task statuses via chat
- Incident responders assigning forensics collection tasks by voice or text
- SOC teams managing cases, evidence repositories, and isolation actions
- Administrators automating user, organization, and policy updates
- Threat hunters validating triage rules and reviewing audit logs
Frequently asked questions
Which runtime does it require?
Node.js 18 or later (as indicated by the badge).
Can I use it with Claude Desktop or Cursor?
Yes, configuration examples for both are provided in the README, using `npx` and environment variables.
What does this server do that direct API usage does not?
It translates natural language commands into API calls, removing the need to manually construct HTTP requests or parse JSON responses.
Is there any limitation on the number of assets or tasks?
The README does not mention any built-in limits; these would depend on the Binalyze AIR instance and API token permissions.
More Other MCP servers
Screenpipe
screenpipeYC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context
22.0K
Klarix Intelligence Engine
KlarixB2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.
Volley.sh
VolleyA good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi
Health by Dr Brad
Dr Brad StanfieldHealth by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one
FastMCP v2 🚀
jlowin🚀 The fast, Pythonic way to build MCP servers and clients.
26.0K
Comments