SecurityCopilotMCPServer

What is this MCP

This MCP server acts as a bridge between development environments and Microsoft Security Copilot, enabling execution of KQL queries in Sentinel and management of Security Copilot skillsets/plugins.

How to use this MCP

Install Python dependencies, configure Azure credentials in .env, then run python server.py. Use tools like /run_prompt or /run_sentinel_query via MCP client (e.g., Cursor IDE).

What this MCP can be used for

Developing/testing Security Copilot skills, executing Sentinel KQL queries, and managing Security Copilot plugins/skillsets programmatically.