MCP.so
Sign In
Servers

Microsoft Sentinel MCP Server

@dstreefkerk

MCP server for Microsoft Sentinel. Enables access to Sentinel logs, incidents, analytics, and Entra ID data via a modular, queryable interface. Strictly non-production. Designed for use with Claude and other LLMs.

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "ms-sentinel-mcp-server": {
      "command": "uv",
      "args": [
        "venv"
      ]
    }
  }
}

More from Data & Analytics