MCP server for Microsoft Sentinel. Enables access to Sentinel logs, incidents, analytics, and Entra ID data via a modular, queryable interface. Strictly non-production. Designed for use with Claude and other LLMs.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
[](https://m8ven.ai/mcp/dstreefkerk-ms-sentinel-mcp-server-169cri)