Netwrix Access Analyzer

What is Netwrix Access Analyzer?

Netwrix Access Analyzer MCP Server is an MCP server that integrates with Claude Desktop to provide access to Netwrix Access Analyzer data. It supports Active Directory and File System solutions, enabling queries and analysis of access permissions and security assessments.

How to use Netwrix Access Analyzer?

Install by cloning the repository and configuring Claude Desktop to use the uv command with the run.py script. Set environment variables for database connection (DB_SERVER, DB_NAME, DB_USER, DB_PASSWORD, DB_USE_WINDOWS_AUTH) in the MCP configuration.

Key features of Netwrix Access Analyzer

• SQL Server integration with automatic startup connection
• Dynamic database schema exploration
• SQL query execution
• Active Directory effective membership and permissions discovery
• File System sensitive data discovery and access analysis
• Integration with Claude Desktop MCP

Use cases of Netwrix Access Analyzer

• Discover effective group membership in Active Directory with filters
• Identify sensitive data (DLP matches) in file systems
• Find open shares accessible to broad groups
• Retrieve AD security assessment results
• List certificate vulnerabilities in Active Directory

FAQ from Netwrix Access Analyzer

What are the dependencies for Netwrix Access Analyzer MCP Server?

Python 3.12 or higher, MCP SDK, pyodbc 4.0.39+, python-dotenv, and ODBC Driver 17 for SQL Server.

Does the server require existing Netwrix Access Analyzer scans?

Yes, it requires Netwrix Access Analyzer File System or Active Directory scans to be completed.

How do I troubleshoot connection issues?

Verify SQL Server is running and accessible, check credentials, ensure ODBC driver is installed, and review logs for error messages.

What Active Directory tools are available?

Tools include Get-ADEffectiveMembership, Get-ADExceptions, Get-ADPermissions, Get-DomainControllers, Get-CertificateVulnerabilities, Get-ADCARights, Get-ADSecurityAssessment, Get-ADUsers, Get-ADGroups, and Get-ADComputers.

What File System tools are available?

Tools include Discover-SensitiveData, Get-OpenShares, Get-TrusteeAccess, Get-TrusteePermissionSource,