// MCP TOOL REFERENCE

VELOCIRAPTOR MCP SERVER TOOLS

11 tools from the Velociraptor MCP Server MCP Server, categorised by risk level.

View the Velociraptor MCP Server policy →

// ALL 11 VELOCIRAPTOR MCP SERVER TOOLS

READ 8 tools

Read CollectArtifactDetailsTool Get detailed information about a specific Velociraptor artifact including its description, parameters, and ... Read FindArtifactDetailsTool Find a Velociraptor artifact Read GetAgentInfo Retrieve detailed information about a Velociraptor client by hostname or FQDN. This tool searches for a cli... Read GetCollectionResultsTool Retrieve Velociraptor collection results for a given client, flow ID, and artifact. This tool waits and ret... Read ListLinuxArtifactNamesTool List only the names of available Linux artifacts in Velociraptor. This tool returns a simple list of artifa... Read ListLinuxArtifactsTool List available Linux artifacts in Velociraptor. This tool returns a summary of all Linux client artifacts i... Read ListWindowsArtifactNamesTool List only the names of available Windows artifacts in Velociraptor. This tool returns a simple list of arti... Read ListWindowsArtifactsTool List available Windows artifacts in Velociraptor. This tool returns a summary of all Windows client artifac...

EXECUTE 3 tools

Execute RunVQLQueryTool Execute a VQL (Velociraptor Query Language) query on the Velociraptor server. This tool allows you to run c... Execute AuthenticateTool Initialize and test connection to Velociraptor server. This tool requires no parameters and will establish ... Execute CollectArtifactTool Collect a Velociraptor artifact from a client. This tool allows you to collect specific artifacts from a ta...

// FAQ

How many tools does the Velociraptor MCP Server MCP server have? +

The Velociraptor MCP Server MCP server exposes 11 tools across 2 categories: Read, Execute.

How do I enforce policies on Velociraptor MCP Server tools? +

Route the Velociraptor MCP Server server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Velociraptor MCP Server tools fall into? +

Velociraptor MCP Server tools are categorised as Read (8), Execute (3). Each category has a recommended default policy.

Enforce policy on every Velociraptor MCP Server tool call.

Deterministic rules across all 11 Velociraptor MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

GOVERN VELOCIRAPTOR →

Free to start. No card required.

42,500+ MCP servers and 110,000+ tools scanned and risk-classified.