Microsoft Sentinel Data Exploration

Official Microsoft Cloud

Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de

Official

The registry verified microsoft.com as the publisher’s domain, and the server runs on it.

as of Oct 4, 2026

Commands and config follow each client’s own MCP docs. Some servers also need an API key or environment variables; see the server’s documentation.

claude mcp add --transport http microsoft-sentinel https://sentinel.microsoft.com/mcp/data-exploration

codex mcp add microsoft-sentinel --url https://sentinel.microsoft.com/mcp/data-exploration

Cursor mcp.json

{
  "mcpServers": {
    "microsoft-sentinel": {
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

Gemini CLI settings.json

{
  "mcpServers": {
    "microsoft-sentinel": {
      "httpUrl": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

VS Code .vscode/mcp.json

{
  "servers": {
    "microsoft-sentinel": {
      "type": "http",
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

By transport: whether the client’s docs list a transport this server offers. It doesn’t cover sign-in or other requirements.

This data comes from the Official MCP Registry.