SecurityCopilotMCPServer
If you are the rightful owner of SecurityCopilotMCPServer and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
A Python-based MCP server using FastMCP library that integrates with Microsoft Security Copilot and Microsoft Sentinel.
The Security Copilot and Sentinel MCP Server is a Python-based server that leverages the FastMCP library to integrate with Microsoft Security Copilot and Microsoft Sentinel. It allows users to run KQL queries against Microsoft Sentinel, manage skillsets and plugins in Microsoft Security Copilot, and execute prompts and skills. The server acts as a bridge between development environments and Microsoft Security Copilot, facilitating the testing, deployment, and execution of skills and plugins. It supports multiple authentication methods and uses SSE as the transport layer. This integration is particularly useful for developing, testing, and deploying Security Copilot KQL Skills.
Features
- Sentinel Integration: Execute KQL queries against your Sentinel workspace.
- Security Copilot Management: Manage skillsets and plugins, including listing, uploading, and running prompts or skills.
- Authentication Support: Supports multiple authentication methods including interactive browser, client secret, and managed identity.
Tools
run_sentinel_query
Execute KQL queries in Sentinel.
get_skillsets
List skillsets in Security Copilot.
upload_plugin
Upload or update a skillset/plugin.
run_prompt
Run a prompt or skill in Security Copilot.
