Skip to content

Add a configuration file for Microsoft Sentinel Graph MCP tool #99

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lindazqli merged 5 commits into from
Jan 12, 2026
Merged

Add a configuration file for Microsoft Sentinel Graph MCP tool #99

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
c77aa99
Add a configuration file for Microsoft Sentinel Graph MCP tool
GuoyuHao Jan 5, 2026
2061fac
Update the summary and description to make it shorter and clean
GuoyuHao Jan 5, 2026
d7f4ee8
Update the key of security scheme to avoid conflict
GuoyuHao Jan 5, 2026
277e9d3
Add one more use case to cover exposure perimeter scenario
GuoyuHao Jan 8, 2026
b7ccefb
Update the documentation link
GuoyuHao Jan 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
51 changes: 51 additions & 0 deletions partners/servers/microsoft-sentinel-graph-mcp-server.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,51 @@
{
"name": "ms-sentinel-graph",
"title": "Microsoft Sentinel Graph",
"summary": "The Graph MCP tool enables natural-language analysis of Microsoft Sentinel graphs to explore relationships and uncover security insights.",
"description": "The Graph MCP tool enables natural-language analysis of Microsoft Sentinel graphs to explore relationships and uncover security insights. Learn more: https://aka.ms/mcp/sentinel-graph",
"vendor": "Microsoft",
"kind": "mcp",
"remote": "https://sentinel.microsoft.com/mcp/graph",
"icon": "https://cdn.jsdelivr.net/gh/Azure/MCP/community/registry/icons/Sentinel.svg",
"externalDocumentation": {
"title": "Microsoft Sentinel Graph documentation",
"url": "https://aka.ms/mcp/sentinel-graph"
},
"license": {
"name": "Microsoft License",
"url": "https://www.microsoft.com/licensing/terms/welcome/welcomepage"
},
"useCases": [
{
"name": "Exposure-to-Critical Asset Path Analysis",
"description": "Build security agents that discover and enumerate realistic attack paths from exposed or vulnerable entry points—such as internet-facing virtual machines or compromised identities—to critical assets like databases, Key Vaults, or sensitive storage accounts, using walkable paths to focus on reachable risks."
},
{
"name": "Compromised Entity Blast Radius Analysis",
"description": "Build security agents that assess the potential impact of a compromised user, managed identity, or virtual machine by traversing connected permissions, identities, and resources to determine how far an attacker could move and which assets could be affected."
},
{
"name": "Exposure Perimeter Mapping",
"description": "Build security agents that identify the exposure perimeter of a resource, identity, or service by finding all incoming access paths from external or less-trusted entities, highlighting how attackers could reach the target and where defensive controls can be applied."
}
],
"categories": "Security",
"tags": ["security", "sentinel", "graph"],
"supportContactInfo": {
"name": "Microsoft Customer Support",
"email": "support@microsoft.com"},
"versionName": "original",
"securitySchemes": {
"sentinelGraphOAuth": {
"type": "oauth2",
"description": "Authenticate with Microsoft Sentinel using OAuth2 authorization code flow with PKCE support.",
"flows": ["authorizationCode"],
"authorizationUrl": "https://login.microsoftonline.com",
"tokenUrl": "https://login.microsoftonline.com",
"scopes": []
}
},
"visibility": "true",
"authSchemas":["OAuth2"],
"audience": "4500ebfb-89b6-4b14-a480-7f749797bfcd"
}