cortexlisted

# Cortex Skill Rust-based syslog receiver and MCP server for homelab log intelligence. Receives RFC 3164/5424 syslog from all homelab hosts, stores in SQLite with FTS5 full-text search, and exposes one MCP tool with action dispatch for AI-driven log analysis. ## Tool A single MCP tool, `mcp__cortex__cortex`, dispatches on a required `action` argument: | action | purpose | |--------|---------| | `search` | Full-text search with FTS5 | | `filter` | Structured filter-only log retrieval | | `tail` | Most recent entries | | `errors` | Error/warning summary by host and severity | | `hosts` | List all known hosts with first/last seen | | `map` | Homelab host/source/app/heartbeat map | | `host_state` | Latest bounded heartbeat state for one host | | `fleet_state` | Fleet-wide heartbeat snapshot with pressure flags and summary counts | | `correlate_state` | Correlate logs with heartbeat summaries around a reference time | | `sessions` | AI transcript sessions by project | | `search_sessions` | Ranked grouped session search | | `abuse` | Abuse hits in AI transcripts with same-session context | | `abuse_incidents` | Groups abuse hits into scored incident candidates | | `abuse_investigate` | Expands incidents into deterministic evidence bundles | | `ai_correlate` | AI transcript anchors cross-referenced against non-AI logs | | `topic_correlate` | Resolve a topic to graph entities and correlate all related logs into a unified timeline | | `usage_blocks` | AI activity in 5-hour windows