Microsoft Sentinel Data Exploration
warningssentinel.microsoft.com
Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de
https://sentinel.microsoft.com/mcp/data-explorationWebsiteAPI keylast checked 24 Aug 2026spoke MCP on 3 of 3 checks (30 days)initialize in 602 msHow to authenticate
Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.
| Scheme | API key |
|---|---|
| Protected-resource metadata | ✓Published (RFC 9728) |
| Anonymous access | Refused — credentials required |
What the probe found
The server challenged for credentials without pointing at any OAuth metadata, so it most likely expects a bearer token or API key you have to obtain by hand. Add it as a header when saving the server.
Contract history
No contract recorded yet — the server has not answered an anonymous connection.
Run this server? A verified owner can publish snapshots with their own credentials, and the contract history starts here, marked owner-reported.
mcpi-cli publish https://sentinel.microsoft.com/mcp/data-explorationGet alerted when this contract changes
Depend on this server? Leave an email. No contract is on record here yet, so alerts can only start once one is published — and alerts are being built; signing up is what tells us to hurry.
Prefer a feed reader? This page's contract changes are also an Atom feed.
Status badge
Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.
[](https://mcpi.app/servers/microsoft-sentinel-data-exploration)Own this server?
Sign in to claim this listing by proving control of the endpoint.