Msdefenderkql MCP server
Execute KQL queries against Microsoft Defender Advanced Hunting via natural language.
B75/100grade B
Adoption
New
0 stars22 downloads/wk
Reviews
Write oneNobody has reviewed Msdefenderkql yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Msdefenderkql tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it
no findings
- Code scan4 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 195 days ago4/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Install Msdefenderkql in Claude Code, Cursor or VS Code
claude mcp add mcp-msdefenderkql -- uvx mcp-msdefenderkql
Msdefenderkql: common questions
- Is Msdefenderkql MCP server safe?
- Mostly: it is graded B (75/100). Read the Msdefenderkql safety report
- How do I install Msdefenderkql?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Msdefenderkql need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Msdefenderkql maintained?
- The last commit was 211 days ago (2026-03-16). The latest release is v1.0.2.