sanssift

nobelchowdary/sanssift
★ 0 stars Python AI/LLM Updated today
SIFT Sentinel wraps the SIFT Workstation's forensic tooling in a read-only MCP server and orchestrates a dual-agent loop (Analyst + Skeptic) where every investigative finding must carry artifact-level citations that independently re-verify. Safety is architectural, not prompt-based.
View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "sanssift": {
      "command": "uvx",
      "args": [
        "sanssift"
      ]
    }
  }
}

Or install with pip: pip install sanssift

README Excerpt

**A DFIR investigation architecture that minimizes hallucination and enforces traceable, reproducible findings through structural citation validation.** SIFT Sentinel wraps the SIFT Workstation's forensic tooling in a read-only MCP server and orchestrates a dual-agent loop (Analyst + Skeptic) where every investigative finding must carry artifact-level citations that independently re-verify. Safety is architectural, not prompt-based.