A Model Context Protocol (MCP) tool for retrieving and analyzing Windows event logs (e.g. Sysmon). WinLog-mcp provides programmatic access to ingest and query Windows event logs, making it ideal for security monitoring, incident response, and log analysis automation.

Installation

⭐ RecommendedPython
python \PATH\TO\main.py --storage-path \PATH\TO\logs\
View configuration snippet
{
  "mcpServers": {
    "winlog-mcp": {
      "command": "python",
      "args": [
        "\\PATH\\TO\\main.py",
        "--storage-path",
        "\\PATH\\TO\\logs\\"
      ]
    }
  }
}

💡 Tip: Make sure you have the appropriate package manager installed. Refer to the official documentation for detailed installation instructions.

Compatibility Matrix

Filter:

Cursor

STDIO
stdio:From mcp.so (unverified)

Claude Desktop

STDIO
stdio:From mcp.so (unverified)

MCP Compatible

STDIO
stdio:From mcp.so (unverified)
Verified - Tested by community
Unverified - Not yet tested
⚡ STDIO🌊 SSE🌐 HTTP

Server Information

License:unknown
Classification:active
Source:Data aggregated from public MCP directories

Quick Stats

Transports:
STDIO
Compatible Clients:3
Install Methods:1

Like this server?

Discover more MCP servers or submit your own to directory.