Armory
Source
Browse
MCPs

mcp-defender-mcp-msdefenderkql

An MCP server for Microsoft Defender Advanced Hunting that enables AI assistants to investigate security events using natural language by translating queries to KQL and executing them against Defender.

Score
35.4431 signal
Evidence
2 forks
Last commit
as last read from GitHub; most reads are from 2 Sep 2026 or later
Listed

Install

No one-command install. Set it up from its source.

Alternatives · MCPs

  1. smn2gnt-salesforce178 stars · 54 forks94.523
  2. pgedge-postgres-mcp-server221 stars · 22 forks93.907
  3. coros-mcp115 stars · 32 forks92.638

What it is

An MCP server for Microsoft Defender Advanced Hunting that enables AI assistants to investigate security events using natural language by translating queries to KQL and executing them against Defender.

When to use it

An MCP server for Microsoft Defender Advanced Hunting that enables AI assistants to investigate security events using natural language by translating queries to KQL and executing them against Defender.

How to install / invoke

See Glama for the install config.

Notes

Listed from the Glama MCP registry.