1. Conduid
  2. Security
  3. Netwrix
MCP server · Security

Netwrix

by · github.com/netwrix/mcp-server-naa

MCP Server for Netwrix Access Analyzer

Unclaimed MIT last commit a year ago security
InstallView source
49Fair

Scored 3 days ago · breakdown

About Netwrix

Netwrix is an MCP server published by netwrix in the Security category: mCP Server for Netwrix Access Analyzer.

The repository has 1 stars and 1 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/netwrix/mcp-server-naa

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Netwrix

Powered by Claude · Grounded in docs

I know everything about Netwrix. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 3 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v0.2.0v0.2.0 (2025-07-15) · 15 Jul 2025Adds new AD tools to the Access Analyzer MCP server along with DXT support.
v0.1.0v0.1.0 · 17 Jun 2025

README

Netwrix Access Analyzer MCP Server

An MCP server for Netwrix Access Analyzer, designed to integrate with Claude Desktop. Currently supports Active Directory and File System solutions.

Features

  • SQL Server integration with automatic connection on startup
  • Dynamic database schema exploration
  • SQL query execution
  • Netwrix Access Analyzer File System tools

Dependencies

This MCP server requires the following dependencies:

  • Python 3.12 or higher
  • MCP SDK
  • pyodbc 4.0.39 or higher (for SQL Server connectivity)
  • python-dotenv 1.0.0 or higher (for environment variable management)
  • ODBC Driver 17 for SQL Server or later (must be installed on your system)

Netwrix Access Analyzer (NAA) Dependencies

This MCP Server requires Netwrix Access Analyzer (NAA) File System or Active Directory scans to be completed.

Available Tools

Solution Tool Name Description
Active Directory Get-ADEffectiveMembership Discovers effective group membership in AD with filters.
Active Directory Get-ADExceptions Retrieves AD exceptions with optional filters.
Active Directory Get-ADPermissions Retrieves AD permissions from the permissions view with filters.
Active Directory Get-DomainControllers Lists domain controllers.
Active Directory Get-CertificateVulnerabilities Lists certificate vulnerabilities.
Active Directory Get-ADCARights Lists AD CA rights.
Active Directory Get-ADSecurityAssessment Retrieves AD security assessment results.
Active Directory Get-ADUsers Retrieves AD user details with filters.
Active Directory Get-ADGroups Retrieves AD group details with filters.
Active Directory Get-ADComputers Retrieves AD computer details with filters.
Database Connect-Database Connects to a specified MSSQL database.
Database Show-ConnectionStatus Shows the current DB connection status.
Database Show-TableSchema Shows the schema for a given table.
File System Discover-SensitiveData Discovers where sensitive data exists (DLP matches).
File System Get-OpenShares Finds open shares accessible to broad groups.
File System Get-TrusteeAccess Finds resources where a trustee has access.
File System Get-TrusteePermissionSource Finds the source of access for a trustee/resource.
File System Get-ResourceAccess Gets effective access for a resource path.
File System Get-UnusedAccess Finds users with unused access to a share.
File System Get-RunningJobs Lists running Netwrix Access Auditor jobs.
File System Get-ShadowAccess Retrieves details about shadow access.

Installation Instructions (Claude Desktop)

  1. Install Claude Desktop

    • Download and install Claude Desktop from the official website: https://claude.ai/download
    • Follow the installation prompts for your operating system (macOS, Windows, or Linux).

  2. Clone this repository

    git clone https://github.com/netwrix/mcp-server-naa.git
cd mcp-server-naa

  3. Connect Claude Desktop to this Server

    • Add the following uv configuration to your Claude Desktop MCP Configuration:
    "NAA_AD": {
  "command": "/path/to/uv",
  "args": [
    "run",
    "--with",
    "pyodbc",
    "fastmcp",
    "run",
    "/path/to/mcp-server-naa/run.py"
  ],
  "env": {
    "DB_SERVER": "HOST OR IP",
    "DB_NAME": "DATABASENAME",
    "DB_USER": "USERNAME",
    "DB_PASSWORD": "PASSWORD",
    "DB_USE_WINDOWS_AUTH": "FALSE|TRUE"
  }
}

Troubleshooting

Connection Issues

If you encounter connection issues:

  1. Verify your SQL Server is running and accessible from your network
  2. Check your credentials in the .env file
  3. Ensure the ODBC driver is correctly installed
  4. Check the logs for detailed error messages

Claude Desktop Integration

If Claude Desktop can't find the uv command:

  1. Use the full path to uv in your configuration (use which uv or where uv to find it)
  2. Make sure you've restarted Claude Desktop after configuration changes
  3. Check the Claude logs for any error messages related to the MCP server

Community

If you need help using this MCP server or understanding your results, just visit the Netwrix Community - we’re here to help!

README fetched from the repository 3 days ago. The original is authoritative.

Questions

About Netwrix

How do I install Netwrix?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Netwrix safe to use with an AI agent?

Its trust score is 49 out of 100 (fair). It passes 4 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Netwrix still maintained?

The last commit was a year ago and 1 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.