Microsoft Sentinel Data Exploration MCP Server lets compatible agents search Sentinel's data lake for relevant tables and retrieve security data using natural-language requests. It is for investigating patterns such as password spraying, impossible travel, multifactor-authentication failures, and dormant-account activity. The catalogue includes its remote MCP endpoint for connecting supported IDEs, agents, and tools.
microsoft/sentinel-data-exploration-mcp
MCP server Claude CodeCodexCursor +2 ✓ vendor
Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de. Remote server at sentinel.microsoft.com.