Microsoft Sentinel MCP
This collection of tools from the Microsoft Sentinel MCP server lets your playbooks reason over comprehensive security data, enabling powerful and flexible SOC automation.
likely compatible Microsoft-certified
Listed in Microsoft's certified MCP connector catalog; add it from the Copilot Studio tool catalog.
Rule R1 · what this means · Not tested in Copilot Studio.
| Publisher | Microsoft |
| Auth (Copilot Studio setting) | Set by the certified connector |
| Connector auth types | Managed Identity, Microsoft Entra ID Integrated, Service principal authentication, Default [DEPRECATED] |
| Connector badges | Preview, Premium |
| Website | /en-us/azure/sentinel/datalake/sentinel-lake-overview |
| Microsoft Learn | https://learn.microsoft.com/en-us/connectors/sentinelmcp/ |
Track changes like this weekly. New Copilot-ready MCP servers, breakages and auth changes, in one short email.
Is this wrong or out of date? Email us. Data built 2026-10-20.