Skip to main content
Glama
noodlemctwoodle

Sentinel Solutions MCP Server

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
MCP_GITHUB_TOKENNoOptional GitHub personal access token used to avoid rate limits when querying live repositories or to access private repositories.

Capabilities

Features and capabilities supported by this server

CapabilityDetails
tools
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
analyze_solutionsB

Run full analysis on all Microsoft Sentinel solutions, extracting connector-table mappings

get_connector_tablesB

Get table mappings for a specific connector ID

search_solutionsC

Search solutions by name, publisher, or keyword

get_solution_detailsA

Get detailed information about a specific solution (fast - only analyzes requested solution)

list_tablesB

Get all unique tables across all solutions

validate_connectorB

Validate a connector JSON definition and extract tables

list_detectionsA

List and filter Microsoft Sentinel detection rules (analytics) - search by solution, severity, tactic, technique, name, query content, or file path. Returns max 100 results by default.

get_detection_detailsB

Get detailed information about a specific detection rule

list_workbooksA

List and filter Microsoft Sentinel workbooks - search by solution, category, name, or file path. Returns max 100 results by default.

get_workbook_detailsC

Get detailed information about a specific workbook

list_hunting_queriesC

List and filter Microsoft Sentinel hunting queries - search by solution, tactic, technique, name, query content, or file path. Returns max 100 results by default.

list_playbooksA

List Microsoft Sentinel playbooks (Logic Apps) - search by solution, name, or file path. Returns max 100 results by default.

list_parsersA

List Microsoft Sentinel parsers (KQL functions) - search by solution, name, query content, or file path. Returns max 100 results by default.

list_watchlistsC

List Microsoft Sentinel watchlists - search by solution, name, or file path. Returns max 100 results by default.

list_notebooksB

List Microsoft Sentinel Jupyter notebooks - search by solution, name, or file path. Returns max 100 results by default.

list_exploration_queriesB

List Microsoft Sentinel exploration queries - search by solution, name, query content, or file path. Returns max 100 results by default.

list_functionsA

List Microsoft Sentinel saved functions - search by solution, name, query content, or file path. Returns max 100 results by default.

list_asim_contentB

List Microsoft Sentinel ASIM (Advanced Security Information Model) content - search by type, name, or file path. Returns max 100 results by default.

list_summary_rulesA

List Microsoft Sentinel summary rules - search by solution, name, query content, or file path. Returns max 100 results by default.

list_toolsB

List Microsoft Sentinel tools and utilities - search by category, name, or file path. Returns max 100 results by default.

list_tutorialsB

List Microsoft Sentinel tutorials and learning resources - search by name or file path. Returns max 100 results by default.

list_dashboardsA

List Microsoft Sentinel dashboards - search by solution, name, or file path. Returns max 100 results by default.

list_data_connectorsB

List Microsoft Sentinel data connectors - search by connector type, name, or file path. Returns max 100 results by default.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/noodlemctwoodle/sentinel-solutions-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server