Microsoft Sentinel Data Exploration

Overview

Microsoft Sentinel Data Exploration is a Model Context Protocol (MCP) server: Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de. Because it speaks the Model Context Protocol, AI assistants can use Microsoft Sentinel Data Exploration as a set of callable tools instead of you copy-pasting between apps.

It's a hosted (remote) server — point your client at https://sentinel.microsoft.com/mcp/data-exploration and you're connected, with nothing to install locally. The current release is v1.0.1, published under the MIT license, with source at microsoft/sentinel-data-exploration-mcp on GitHub.

On mcp.site, Microsoft Sentinel Data Exploration sits in the Security category. Any MCP client can use it — Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed among them — via the install snippets below. If you maintain Microsoft Sentinel Data Exploration for microsoft.com, claim this listing to verify ownership, earn the Verified badge, and keep the details current.

Installation

Settings → Connectors → Add custom connector
Name: Microsoft Sentinel Data Exploration
URL:  https://sentinel.microsoft.com/mcp/data-exploration