
microsoft/purview-dlm-mcp
Security testingЭта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал
An MCP (Model Context Protocol) server for diagnosing Microsoft Purview Data Lifecycle Management issues via Exchange Online PowerShell.
Обзор
An MCP (Model Context Protocol) server for diagnosing Microsoft Purview Data Lifecycle Management issues via Exchange Online PowerShell. - — run_powershell for executing read-only Exchange Online commands, get_execution_log for retrieving a full audit trail, ask_learn for Microsoft Learn documentation lookup, create_issue for reporting issues with the MCP server to GitHub, and submit_feedback for collecting structured diagnostic session feedback - — step-by-step diagnostic workflows aligned to common DLM symptoms - — automated evaluation engine that parses PowerShell output and produces structured findings with remediation - — only pre-approved read-only cmdlets can be executed; mutating commands are blocked - Node.js 18+ - PowerShell 7 — 7.4.22, 7.5.13, 7.6.9 or later. PowerShell bundles its own .NET runtime, and earlier builds are exposed to CVE-2026-111497; updating the system .NET does not patch pwsh. - ExchangeOnlineManagement PowerShell module (v3.
README
Показан фрагмент оригинального README. Открыть оригинал.
Microsoft Purview DLM Diagnostics MCP
An MCP (Model Context Protocol) server for diagnosing Microsoft Purview Data Lifecycle Management issues via Exchange Online PowerShell.
Features
- 5 MCP tools —
run_powershellfor executing read-only Exchange Online commands,get_execution_logfor retrieving a full audit trail,ask_learnfor Microsoft Learn documentation lookup,create_issuefor reporting issues with the MCP server to GitHub, andsubmit_feedbackfor collecting structured diagnostic session feedback - 11 TSG reference guides — step-by-step diagnostic workflows aligned to common DLM symptoms
- 72 diagnostic checks — automated evaluation engine that parses PowerShell output and produces structured findings with remediation
- Cmdlet allowlist — only pre-approved read-only cmdlets can be executed; mutating commands are blocked
Prerequisites
Установка
npx -y @microsoft/purview-dlm-mcpКонфигурация
{
"mcpServers": {
"dlm-diagnostics": {
"command": "npx",
"args": ["-y", "@microsoft/purview-dlm-mcp"],
"env": {
"DLM_UPN": "[email protected]",
"DLM_ORGANIZATION": "yourtenant.onmicrosoft.com",
"DLM_COMMAND_TIMEOUT_MS": "180000"
}
}
}
}