Syslog MCP Server

by tootie Your server? Claim it

answering

Syslog MCP is answering right now. Last checked 11 min ago. Last commit 1 Oct 2026.

Syslog receiver and MCP server for homelab log intelligence.

Uptime history 91 days of history · worst day 0%

91 days agonow

100.0%

Uptime 24h

91 of 91 checks

—

Tools

hidden behind auth

110 ms

Response time

average over 24h

Stars

last commit 1 Oct 2026

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 9 August 2026. No other catalogue keeps this.

9 Aug the owner changed

What the code does

We read the source, 2 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command packages/cortex-rmcp/bin/cortex.js:9

if (!fs.existsSync(binary)) { const installer = path.resolve(__dirname, "..", "scripts", "install.js"); const install = spawnSync(process.execPath, [installer], { stdio: "inherit" }); if (install.status !== 0) fail("binary is not installed; postinstall may have failed"); }

Builds a database query by concatenation src/db/error_signatures.rs:108, src/db/host_attribution.rs:282

         DO UPDATE SET count_in_window = count_in_window + excluded.count_in_window",

Asks for container control access src/db/graph_findings_tests.rs:52, src/heartbeat_agent.rs:25

                source: Some("/var/run/docker.sock".to_string()),

Touches key and credential files src/agent_deploy.rs:67, src/main.rs:350

        .map(|h| h.join(".ssh/config"))

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add syslog-mcp --transport http https://syslog.tootie.tv/mcp

Settings → Connectors → Add custom connector, then paste this address

https://syslog.tootie.tv/mcp

~/.codex/config.toml

[mcp_servers.syslog-mcp]
url = "https://syslog.tootie.tv/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "syslog-mcp": {
      "url": "https://syslog.tootie.tv/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "syslog-mcp": {
      "type": "http",
      "url": "https://syslog.tootie.tv/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but it did not say what kind of credentials it expects.

Endpoints

URL	Transport	State	Latency	Checked
https://syslog.tootie.tv/mcp	streamable-http	needs auth	80 ms	11 min ago

Alternatives to Syslog MCP

same job, measured the same way

Cortex

by tootie

Syslog receiver and MCP server for homelab log intelligence.

answering

Cortex RMCP

by dinglebear

Self-hosted homelab log intelligence over MCP, CLI, and REST with SQLite/FTS.

128 installs/wk local only

Hotel Rate Monitoring API

by veyvey45-eng

Remote MCP server for hotel rate monitoring, parity checks, and pricing intelligence via Apify.

answering

Cortex RMCP

by dinglebear

Rust MCP server for homelab logs, syslog, Docker logs, FTS search, and AI transcript correlation.

local only

ThousandEyes MCP

by thousandeyes

ThousandEyes MCP Server for network intelligence: outages, anomalies, alerts, events, and tests.

2 tools answering

Cronometer

by cphoskins

MCP server for Cronometer — food logs, macros, fasting, biometrics, and recurring foods

1 269 installs/wk local only

Alertlogic MCP

by rijul170

MCP server for Alert Logic MDR — incident response, log search, SOAR, and SOC workflows

106 installs/wk local only

Huntress

by wyre-ai

MCP server for Huntress — accounts, organizations, agents, incidents, and reports.

local only

Syslog MCP — questions

Answers built from our own checks of this server.

Why is there no tool list for Syslog MCP?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Syslog MCP working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 110 ms. The bar chart above shows every period we have measured.

How do I connect Syslog MCP?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own credentials: it refuses anonymous clients.

Does Syslog MCP need an API key?

Yes. Every time we knock, Syslog MCP answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Syslog MCP?

It answers our handshake in 110 ms on average, which is faster than 92% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Syslog MCP open source?

The code is open source: it is published under the AGPL-3.0 licence, written in Rust, 4 stars on GitHub and 6 open issues. The licence covers the code in the repository, not the hosted service at syslog.tootie.tv, which runs on its operator's own terms.