Skip to main content
Glama
art-r

(Non-Data-Lake) Sentinel and XDR MCP Server

by art-r
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Related Servers

Alternatives to (Non-Data-Lake) Sentinel and XDR MCP Server

No user-submitted related servers found.

    Related Servers

    • ms-sentinel-mcp-server

      dstreefkerk
      A
      license
      C
      quality
      D
      maintenance
      MCP server for Microsoft Sentinel. Enables access to Sentinel logs, incidents, analytics, and Entra ID data via a modular, queryable interface. Strictly non-production. Designed for use with Claude and other LLMs.
      49
      18
      MIT

    • Defender Hunt MCP

      Soucheff
      A
      license
      Not graded
      quality
      D
      maintenance
      Enables security investigation and threat hunting through Microsoft Defender and Entra ID, with 31 tools for KQL queries, alerts, threat intelligence, identity investigation, and advanced threat hunting.
      MIT

    • eSentire Atlas MCP Server

      omichelbraga
      F
      license
      A
      quality
      B
      maintenance
      Exposes eSentire Atlas API (Findings, Ticketing, MVS) and Threat Intelligence feeds (IP Watch, Advanced/STIX) as MCP tools, enabling security operations and threat intelligence queries through natural language.
      29
      -

    • Unified Audit Log MCP

      sedattavukcu
      F
      license
      Not graded
      quality
      C
      maintenance
      Read-only MCP server for querying Microsoft Purview unified audit logs across M365 workloads, wrapping the Graph API's asynchronous audit log search.
      -

    • azure-query-mcp

      kapetanios55
      A
      license
      A
      quality
      A
      maintenance
      Enables read-only querying of Azure Log Analytics and Azure Resource Graph through MCP, supporting KQL queries, workspace discovery, and resource inventory exploration with Azure RBAC authentication.
      11
      527 npm
      2
      MIT

    • prd-ops-lens-mcp

      dehanz13
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables incident responders to query and correlate observability and DevOps evidence across Grafana, Prometheus, Loki, Uptime Kuma, CloudWatch, IAM, and PostHog from a local MCP client, with bounded reads and redacted audit records.
      MIT

    This server cannot be deployed

    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues

    Resources