dstreefkerk/ms-sentinel-mcp-server
Developer toolsMCP server for Microsoft Sentinel. Enables access to Sentinel logs, incidents, analytics, and Entra ID data via a modular, queryable interface. Strictly non-production.
Overview
Get started with the Sentinel MCP server This was an experimental, read-only Model Context Protocol (MCP) server for Microsoft Sentinel, intended for test environments only. The implementation has been retired and removed; this README is all that remains. This project is licensed under the MIT License.
README
Microsoft Sentinel MCP Server
🗄️ This repository is archived and no longer maintained
Microsoft has released an official, hosted Sentinel MCP server — use that instead: Get started with the Sentinel MCP server
This was an experimental, read-only Model Context Protocol (MCP) server for Microsoft Sentinel, intended for test environments only. The implementation has been retired and removed; this README is all that remains.
📄 License
This project is licensed under the MIT License.
Install
This server does not publish a one-line install command.
Open the repository installation guide New to MCP? Start with the mcpskill.org guide →