About MSDefender MCP
MSDefender MCP is an MCP server published by llallum in the Blockchain category: mCP Server for Defender XDR. No API Token Needed!!! Only Browser Session.
The repository has 1 stars and 0 forks, with the last commit 3 months ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/llallum/MSDefender-MCPThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (6)
get_defender_associated_alertsGet paginated alerts for an incident. Supports severity filtering; use `lookBackInDays=180` when the default 30-day window returns no results for older or DLP-only incidents
Parameters not published.
get_defender_incident_audit_logsGet audit log history for an incident
Parameters not published.
get_defender_incident_by_idGet full details of a specific incident
Parameters not published.
get_defender_incidentsGet incidents with filtering by date, severity, machine ID, IP, URL, hash
Parameters not published.
set_defender_incident_commentPost a comment to one or more incidents
Parameters not published.
update_defender_incident_statusUpdate incident status, severity, classification
Parameters not published.
Ask AI
Ask AI about MSDefender MCP
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.