MCP.Market

Microsoft Sentinel Data Exploration MCP server

online · 100% uptime
by microsoft.com·com.microsoft/sentinel-data-exploration·v1.0.1·2 stars
No reviews yet

Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de

B80/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
New

2 stars

Reviews

Write one

Nobody has reviewed Microsoft Sentinel Data Exploration yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Microsoft Sentinel Data Exploration tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 41ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityOAuth resource metadata advertised on 40115/15
  • Maintenancelast push 260 days ago4/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Microsoft Sentinel Data Exploration compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 64% of 915 Security servers
Uptime
100%
of our recent checks; the typical remote Security server answers 100%
Response time
102 ms
faster than 87% of 547 Security servers
GitHub stars
2
more than 75% of 587 Security servers

Install Microsoft Sentinel Data Exploration in Claude Code, Cursor or VS Code

claude mcp add --transport http sentinel-data-exploration https://sentinel.microsoft.com/mcp/data-exploration
Add to Cursor

What the publisher says

From the Microsoft Sentinel Data Exploration repository's README, as published. We do not edit it. Read it on GitHub

Microsoft Sentinel Data Exploration

INSTALL

The data exploration tool collection in the Microsoft Sentinel MCP server lets you search for relevant tables and retrieve data from Microsoft Sentinel's data lake using natural language.

🌐 The Microsoft Sentinel Data Exploration MCP Server Endpoint

The Microsoft Sentinel Data Exploration MCP Server is accessible to any IDE, agent, or tool that supports the Model Context Protocol (MCP). Any compatible client can connect to the following remote MCP endpoint:

https://sentinel.microsoft.com/mcp/data-exploration

Authentication OAuth 2.0

🧩 Use cases

Password-Spray Hunt Build security agents that autonomously select relevant sign-in tables, aggregates login attempts by user and IP, and flags patterns consistent with password-spray behavior—like low-frequency attempts over several months across many accounts.

Impossible Travel Check Build security agents that correlate sign-in events by user, calculates geodistance and time gaps between logins, and flags cases where travel speed exceeds realistic thresholds, suggesting credential compromise.

Multi-factor authorization failures Build security agents that analyzes multi-factor auth logs to detect spikes in failure rates, clustering by user, IP, or time window, and surfaces anomalies that deviate from baseline behavior over long periods.

Dormant Account wake-up Build security agents that based on inactivity thresholds, scans for accounts with long silence followed by recent activity, and builds a timeline showing when and how these accounts re-engaged.

📚 Learn more

Explore Microsoft Sentinel data lake with data exploration collection

Nothing above is checked by us. What we check is on the safety report.

Microsoft Sentinel Data Exploration: common questions

Is Microsoft Sentinel Data Exploration MCP server safe?
Mostly: it is graded B (80/100). Read the Microsoft Sentinel Data Exploration safety report
How do I install Microsoft Sentinel Data Exploration?
It runs remotely at sentinel.microsoft.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Microsoft Sentinel Data Exploration need an API key?
No key to paste: it signs you in with OAuth when your client connects.
Is Microsoft Sentinel Data Exploration maintained?
The last commit was 294 days ago (2026-01-14). The latest release is v1.0.1.
Is Microsoft Sentinel Data Exploration up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Microsoft Sentinel Data Exploration?
Servers from other publishers that do the same job: Npm Sentinel MCP server, Patch Tuesday MCP server and Skylos MCP server.
How does Microsoft Sentinel Data Exploration compare with other Security MCP servers?
safety score 80/100 (higher than 64% of 915 Security servers); uptime 100% (of our recent checks; the typical remote Security server answers 100%); response time 102 ms (faster than 87% of 547 Security servers). Full comparison.

Alternatives to Microsoft Sentinel Data Exploration

Same job from other publishers: the closest match first, then the best rated.

  • Npm Sentinel
    Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
    A
  • Patch Tuesday
    Query Microsoft Patch Tuesday security updates (MSRC) with EPSS and CISA KEV enrichment
    B
  • Skylos
    Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
    C
  • Snyk
    Easily find and fix security issues in your applications leveraging Snyk platform capabilities.
    B
  • CrowdStrike Falcon MCP Server
    Connects AI agents with CrowdStrike Falcon for security analysis and automation.
    A