Defender XDR MCP Server
by RedBeard955
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MCP_ENV | No | Runtime environment. In production, startup fails if required values such as JWT_SIGNING_KEY are missing. | production |
| MDCA_AUTH | No | Authentication mode for Defender for Cloud Apps: obo for on-behalf-of user authentication, or token for a legacy API token. | obo |
| MCP_PROFILE | No | Optional profile. Set to read for a read-only server with read permissions only. | |
| MDCA_API_URL | No | Defender for Cloud Apps API URL for sanction_cloud_apps. Empty means the tool is not configured. | |
| MDE_API_HOST | No | Host of the Defender for Endpoint API. Regional hosts such as eu., uk., or us.api.security.microsoft.com are allowed. Only Microsoft hosts are permitted. | api.security.microsoft.com |
| MDE_RESOURCE | No | Resource for the OBO token exchange (WindowsDefenderATP). Normally should not be changed. | https://api.securitycenter.microsoft.com |
| MDCA_API_TOKEN | No | Legacy Defender for Cloud Apps API token. Only used when MDCA_AUTH=token. | |
| JWT_SIGNING_KEY | Yes | Key for cursors and confirmations. Required in production; startup fails if it is missing. | |
| CUSTOM_HUNTS_FILE | No | Path to a custom hunt catalog for run_custom_hunt. Empty uses the bundled custom_hunts.json. | |
| SENTINEL_WORKSPACES | No | Sentinel/ISOC workspaces offered by name in the form name=workspace-id, separated by commas. Empty uses the user's primary workspace. | |
| ALLOWED_CLIENT_APP_IDS | Yes | App ID of the allowed Copilot Studio client application. The server rejects tokens from other client apps. | |
| MCP_MAX_RESPONSE_BYTES | No | Size budget for tool responses; long texts are truncated. | |
| HUNTING_TIMEOUT_SECONDS | No | Time limit per Advanced Hunting query, 10-300 seconds. Copilot Studio cancels tool calls after 120 seconds, so do not set much above 100. | 90 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo recent community issues