A Model Context Protocol (MCP) server that integrates Volatility 3 memory forensics framework with Claude
接入配置
选择客户端，复制配置，再按项目文档补齐环境变量。
claude mcp add volatility --env PYTHONPATH='<PYTHONPATH>' -- python /path/to/volatility_mcp_server.py~/.codex/config.toml
[mcp_servers.volatility]
command = "python"
args = ["/path/to/volatility_mcp_server.py"]
env = { PYTHONPATH = "<PYTHONPATH>" }
# codex mcp add volatility --env PYTHONPATH='<PYTHONPATH>' -- python /path/to/volatility_mcp_server.py~/.cursor/mcp.json
{
"mcpServers": {
"volatility": {
"command": "python",
"args": [
"/path/to/volatility_mcp_server.py"
],
"env": {
"PYTHONPATH": "<PYTHONPATH>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"volatility": {
"type": "stdio",
"command": "python",
"args": [
"/path/to/volatility_mcp_server.py"
],
"env": {
"PYTHONPATH": "<PYTHONPATH>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"volatility": {
"command": "python",
"args": [
"/path/to/volatility_mcp_server.py"
],
"env": {
"PYTHONPATH": "<PYTHONPATH>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"volatility": {
"command": "python",
"args": [
"/path/to/volatility_mcp_server.py"
],
"env": {
"PYTHONPATH": "<PYTHONPATH>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"volatility": {
"command": "python",
"args": [
"/path/to/volatility_mcp_server.py"
],
"env": {
"PYTHONPATH": "<PYTHONPATH>"
}
}
}
}需要的环境变量
PYTHONPATH
把占位值换成你自己的密钥；不要把密钥提交到代码仓库。