Skip to main content
Glama
trickyfalcon

MCP Defender (mcp-msdefenderkql)

by trickyfalcon
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Related Servers

Alternatives to MCP Defender (mcp-msdefenderkql)

No user-submitted related servers found.

    Related Servers

    • MDI MCP Server

      TigerToker
      A
      license
      Not graded
      quality
      C
      maintenance
      An MCP server that integrates with Microsoft Defender for Identity via the Microsoft Graph API, enabling natural language queries and HTML report generation for alerts, incidents, risky users, and more.
      MIT

    • mssql-mcp

      eamonboyle
      A
      license
      Not graded
      quality
      B
      maintenance
      An MCP server that enables AI assistants to query and manage Microsoft SQL Server databases using natural language.
      184 npm
      5
      MIT

    • falcon-mcp

      rijul170
      A
      license
      Not graded
      quality
      B
      maintenance
      MCP server bridging AI assistants with CrowdStrike Falcon for SOC operations, enabling natural-language triage, investigation, and response across detections, endpoints, threat intelligence, and more.
      MIT

    • AI Detection Engineering

      Simoon896
      A
      license
      Not graded
      quality
      C
      maintenance
      An MCP server that enables conversational interaction with Wazuh SIEM, allowing users to investigate alerts, hunt threats, tune false positives, edit rules, and run security actions via natural language.
      MIT

    • wazuh-mcp-server

      Sbharadwaj05
      A
      license
      A
      quality
      C
      maintenance
      AI-powered MCP server that enables security analysts to query Wazuh SIEM/XDR for alert triage, threat hunting, compliance audits, and incident response through natural language prompts.
      28
      13
      MIT

    • LevelBlue USM Anywhere MCP

      javierb507
      F
      license
      Not graded
      quality
      D
      maintenance
      A production-ready MCP server that connects AI assistants to LevelBlue's USM Anywhere security platform, enabling advanced security queries, investigation management, and threat analysis through natural language.
      1
      -
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A4/5.0

    Scored across 2 tools

    Disambiguation5/5

    The two tools have clearly distinct purposes: one for exploring the schema and one for executing queries. No overlap or ambiguity exists.

    Naming Consistency5/5

    Both tools follow a consistent verb_noun pattern ('get_hunting_schema' and 'run_hunting_query'), making them predictable and easy to understand.

    Tool Count3/5

    With only 2 tools, the server feels minimal. While it covers the core workflow (schema discovery + query execution), additional tools for result handling or query management could enhance the set.

    Completeness3/5

    The tools cover the basic hunting loop (schema first, then query), but missing features like saving queries, paginating results, or managing sessions leave notable gaps for a security investigation tool.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues

    Resources