OfficialMicrosoft Sentinel MCP server
com.microsoft/sentinel-data-exploration
The Microsoft Sentinel MCP server is published by Microsoft Sentinel and verified by API Tracker against Microsoft Sentinel's own evidence. Connect at https://sentinel.microsoft.com/mcp/data-exploration over Streamable HTTP.
Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de
Connection details
Setup & evidence
A remote endpoint is listed. Check publisher instructions for authentication and client support.
Based on registry metadata. Resource type has not been independently reviewed.
Documentation only · not runtime-tested.
Connection evidence
- Publisher
- Official affiliation reviewedPublisher source ↗
- Setup evidence
- Registry metadata only
- Protocol connection
- Not tested in this browser
- Tool discovery
- Not tested in this browser
Connection results apply only to this browser session. Tool discovery does not test tool execution or establish safety. Publisher affiliation is reviewed separately.
Trust & access Review before connecting
- Publisher
- Official affiliation reviewed · View evidence ↗Evidence reviewed 2026-10-17
- Connection
- Remote endpoint listed
https://sentinel.microsoft.com/mcp/data-exploration - Authentication & scopes
- Not inspected. Review the server’s authentication requirements before granting access.
- Tool permissions
- Not inspected. Inspect available tools in a compatible MCP client before use; tool annotations are publisher claims.
- Source
- MCP Registry ↗ · Repository ↗Catalog observed 2026-11-03
com.microsoft/sentinel-data-exploration
Publisher verification is not a security audit. MCP Connect exports configuration; your MCP client and server must enforce permissions and approvals.
- Listed version
- 1.0.1
- Transports
- streamable-http
Remote endpoint
https://sentinel.microsoft.com/mcp/data-explorationFollow the publisher’s setup instructions for authentication and client compatibility.
Common questions
Is the Microsoft Sentinel MCP server official?
Yes. API Tracker matched this MCP Registry entry (com.microsoft/sentinel-data-exploration) to Microsoft Sentinel's own evidence at https://github.com/microsoft/sentinel-data-exploration-mcp on 2026-10-17.
What is the Microsoft Sentinel MCP server URL?
https://sentinel.microsoft.com/mcp/data-exploration, using Streamable HTTP. Add it as a remote MCP server or connector in a compatible MCP client.
Where is the Microsoft Sentinel MCP server source code?
https://github.com/microsoft/sentinel-data-exploration-mcp. The registry lists version 1.0.1.