MCP server for Volatility 3.x, allowing you to perform memory forensics analysis with AI assistant. Experience memory forensics without barriers as plugins like pslist and netscan become accessible through clean REST APIs and LLMs.
Run the underlying MCP server directly — without Agent-CoreX routing.
npx -y volatility-mcpAgent-CoreX intelligently routes which tools from Gaffx/volatility-mcp your AI agent actually needs per request — reducing token usage and cost.
agent-corex.json
{
"mcpServers": {
"volatility-mcp": {
"command": "npx",
"args": [
"-y",
"volatility-mcp"
]
}
}
}Connect in 2 minutes. Only pay for the tools your agent actually uses.
Recommended: intelligent tool routing, lower costs
uvx agent-corex mcp add volatility-mcpAgent-CoreX selects only the tools your agent needs, cutting token usage by up to 60%.
Use Gaffx/volatility-mcp directly without routing
npx -y volatility-mcpNew to Agent-CoreX? View setup guide →