About Mde Kql
Mde Kql is an MCP server published by stanfrbd in the Security category: execute some KQL with your favorite LLM agent.
Install
git clone https://github.com/stanfrbd/mcp-mde-kqlThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (2)
get_hunting_schemaList all available tables, or get columns and types for a specific table
Parameters not published.
run_hunting_queryExecute a KQL query against Defender Advanced Hunting and return formatted results
Parameters not published.
Ask AI
Ask AI about Mde Kql
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.