Supports environment variable configuration for authentication and server settings through .env files, allowing secure storage of Azure credentials and server configuration.
Enables access to source control information for Sentinel resources, including listing and viewing repository details for security content managed through source control.
Referenced as the repository hosting location for the MCP server, allowing users to clone and install the server from GitHub.
Utilizes Python as the implementation language, with support for Python-based environment setup, dependency management, and execution of the MCP server.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@ms-sentinel-mcp-server list recent security incidents from the last 24 hours"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
🗄️ This repository is archived and no longer maintained
Microsoft has released an official, hosted Sentinel MCP server — use that instead: Get started with the Sentinel MCP server
This was an experimental, read-only Model Context Protocol (MCP) server for Microsoft Sentinel, intended for test environments only. The implementation has been retired and removed; this README is all that remains.
Related MCP server: vantage-mcp-server
This project is licensed under the MIT License.
Unclaimed servers have limited discoverability.
If you are the server author, to access and configure the admin panel.
MCP server for Blockscout
MCP server for fcc-ecfs
Autopilot MCP server for GEO analyses, reports, content, audits, memories and agents.
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/dstreefkerk/ms-sentinel-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server
