Microsoft Sentinel Data Exploration MCP Server

by microsoft Your server? Claim it

answering

Microsoft Sentinel Data Exploration is answering right now. Last checked 12 min ago. Last commit 14 Jan 2026.

Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de

Uptime history 91 days of history · worst day 95%

91 days agonow

100.0%

Uptime 24h

91 of 91 checks

—

Tools

hidden behind auth

269 ms

Response time

average over 24h

Stars

last commit 14 Jan 2026

Nothing serious here today

Today is the operative word: we check Microsoft Sentinel Data Exploration every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 12 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add sentinel-data-exploration --transport http https://sentinel.microsoft.com/mcp/data-exploration

Settings → Connectors → Add custom connector, then paste this address

https://sentinel.microsoft.com/mcp/data-exploration

~/.codex/config.toml

[mcp_servers.sentinel-data-exploration]
url = "https://sentinel.microsoft.com/mcp/data-exploration"

.cursor/mcp.json

{
  "mcpServers": {
    "sentinel-data-exploration": {
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "sentinel-data-exploration": {
      "type": "http",
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.

Endpoints

URL	Transport	State	Latency	Checked
https://sentinel.microsoft.com/mcp/data-exploration	streamable-http	sign-in	235 ms	12 min ago

Alternatives to Microsoft Sentinel Data Exploration

same job, measured the same way

Agent Security

by mdfifty50-boop

Security scanning and threat detection for AI agents

61 installs/wk local only

Changegamer

by beneb89

Agent-first resource directory for AI agents: protocols, security, RAG, memory, evals, and more.

14 tools answering

Zn Gate

by usezn

The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.

1 483 installs/wk local only

Secureflows MCP Server

by michal-lefler

MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.

18 tools answering

Secureflows MCP

by michal-lefler

MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.

18 tools answering

Offense

by offense-research

Security tools for coding agents: dependency advisory audits and evidence for remediation.

1 tools answering

Fulcra

by fulcradynamics

Use your Fulcra secure context lake to collaborate with other agents, read and write data, and more

2 413 installs/wk answering

Lattice: CVE, MITRE ATT&CK and detection graph for security agents

by namiq

CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source.

7 tools answering

Microsoft Sentinel Data Exploration — questions

Answers built from our own checks of this server.

Why is there no tool list for Microsoft Sentinel Data Exploration?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Microsoft Sentinel Data Exploration working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 269 ms. The bar chart above shows every period we have measured.

How do I connect Microsoft Sentinel Data Exploration?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You sign in through your browser once and the client keeps the session: no key to copy, and it refuses anonymous clients.

How do you sign in to Microsoft Sentinel Data Exploration?

No API key is involved. Microsoft Sentinel Data Exploration answers our knock with an OAuth challenge, so you authorise it once in your browser and the client keeps the session. That is also why we see no tool list: it will not describe itself to an anonymous client, and that is the server working as intended, not a fault.

How fast is Microsoft Sentinel Data Exploration?

It answers our handshake in 269 ms on average, which is faster than 53% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Microsoft Sentinel Data Exploration open source?

The code is open source: it is published under the MIT licence and 1 stars on GitHub. The licence covers the code in the repository, not the hosted service at sentinel.microsoft.com, which runs on its operator's own terms.