What are the prerequisites to run this server?
Python 3.8+, a Microsoft Sentinel workspace, access to Microsoft Security Copilot, and appropriate Azure permissions for both services.
Security Copilot and Sentinel MCP Server
@jguimera
基本情報
Security Copilot and Sentinel MCP Server について
MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testing and uploading Security Copilot artifacts.
Security Copilot and Sentinel MCP Server の設定
Security Copilot and Sentinel MCP Server のツール
ツール一覧はまだありません
この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。
ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。
概要
What is Security Copilot and Sentinel MCP Server?
A Python-based MCP server using the FastMCP library that provides integration with Microsoft Security Copilot and Microsoft Sentinel via Azure Identity Authentication. It enables running KQL queries against Sentinel, managing Security Copilot skillsets/plugins, and executing prompts and skills, acting as a bridge between development environments and Microsoft Security Copilot.
How to use Security Copilot and Sentinel MCP Server?
Clone the repository, install dependencies with pip install -r requirements.txt, create a .env file with your Azure and Sentinel configuration, then start the server with python server.py. Optionally run tests with python server.py --run-tests. The server exposes tools that can be invoked from MCP clients like Cursor.
Key features of Security Copilot and Sentinel MCP Server
- Execute KQL queries against Microsoft Sentinel workspaces
- List existing skillsets/plugins in Security Copilot
- Upload or update skillsets/plugins
- Run prompts or skills in Security Copilot
- Supports interactive browser, client secret, and managed identity authentication
Use cases of Security Copilot and Sentinel MCP Server
- Develop, test, and deploy Security Copilot KQL skills
- Integrate Sentinel query results into Security Copilot workflows
- Automate management of Security Copilot plugins and prompts
- Enable AI‑assisted security operations via MCP client (e.g., Cursor)
よくある質問
What authentication methods are supported?
Three methods: interactive browser, client secret (using an App Registration), and managed identity.
How do I configure the server?
Create a `.env` file with your tenant ID, client ID, client secret (optional), Sentinel subscription ID, resource group, workspace name, workspace ID, and authentication type (`interactive` or `client_secret`).
What transport does the MCP server use?
The server uses SSE (Server‑Sent Events) as the transport layer.
What tools are provided by the server?
`run_sentinel_query`, `get_skillsets`, `upload_plugin`, and `run_prompt`.
「開発者ツール」の他のコンテンツ
AptiBuild AI — Career Intelligence
ParklandBuildsAptiBuild AI — Career Intelligence MCP Server Structured career decision scaffolding for AI agents. Provides personality-conditioned business idea generation, official BLS OEWS wage data, FRED labor market signals, and
Pugi
Pugi Inc.Pugi is an AI product team that builds, checks and publishes websites and apps. Its MCP server gives agents a passive website security check graded A+ to F (headers, TLS, cookies, exposed keys in scripts), free with a no
BetterBugs
BetterBugsThe BetterBugs MCP (Model Context Protocol) enables you to load BetterBugs bug reports (via report links) directly to your preferred AI Agents and developer environments with MCP Client capabilities (such as Cursor, VS C
Yocoolab
YocoolabMCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools
1
ArtiBot Cloud MCP - Zhijiangyun 智匠云
bofobArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation
1
コメント