Microsoft Sentinel Data Exploration MCP server

Microsoft Sentinel Data Exploration is the official remote MCP server from microsoft.com. It answers at https://sentinel.microsoft.com/mcp/data-exploration over streamable HTTP and asks you to sign in with your microsoft.com account before it lists its tools, so your client opens a login the first time it connects. Our probes reached it 10 of 10 times since 5 September 2026; the last check, on 18 October 2026, got the sign-in challenge, so it is up.

Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de

Description as the publisher wrote it.

What Microsoft Sentinel Data Exploration needs before it works

A sign-in. The server refused to list its tools to an anonymous client and answered with an authentication challenge, which is how an MCP server protected by OAuth behaves. Add it with one of the setups below; the first connection opens a login for your microsoft.com account, and the tools appear once you have approved it.

Add Microsoft Sentinel Data Exploration to your AI client

Every block below points at https://sentinel.microsoft.com/mcp/data-exploration. Pick your client and copy.

claude mcp add --transport http microsoft-sentinel-data-explorat https://sentinel.microsoft.com/mcp/data-exploration

{
  "mcpServers": {
    "microsoft-sentinel-data-explorat": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://sentinel.microsoft.com/mcp/data-exploration"]
    }
  }
}

{
  "mcpServers": {
    "microsoft-sentinel-data-explorat": {
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

{
  "servers": {
    "microsoft-sentinel-data-explorat": {
      "type": "http",
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

{
  "context_servers": {
    "microsoft-sentinel-data-explorat": {
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

{
  "mcpServers": {
    "microsoft-sentinel-data-explorat": {
      "serverUrl": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

{
  "mcpServers": {
    "microsoft-sentinel-data-explorat": {
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

name: Microsoft Sentinel Data Exploration
version: 0.0.1
schema: v1
mcpServers:
  - name: Microsoft Sentinel Data Exploration
    type: streamable-http
    url: https://sentinel.microsoft.com/mcp/data-exploration

{
  "mcpServers": {
    "microsoft-sentinel-data-explorat": {
      "httpUrl": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

{
  "mcpServers": {
    "microsoft-sentinel-data-explorat": {
      "type": "http",
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

{
  "mcpServers": {
    "microsoft-sentinel-data-explorat": {
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

goose://extension?url=https%3A%2F%2Fsentinel.microsoft.com%2Fmcp%2Fdata-exploration&type=streamable_http&id=microsoft-sentinel-data-explorat&name=Microsoft%20Sentinel%20Data%20Exploration

Is Microsoft Sentinel Data Exploration up right now?

It answered our last check on 18 October 2026 in 86 ms. Over 10 checks since 5 September 2026 it answered 10. Status here comes from Neuronto's own probes, not from the publisher.

MCP servers similar to Microsoft Sentinel Data Exploration

Questions about Microsoft Sentinel Data Exploration

Is there an official Microsoft Sentinel Data Exploration MCP server?

Yes. It is published by microsoft.com and served from sentinel.microsoft.com, the vendor's own domain: https://sentinel.microsoft.com/mcp/data-exploration.

How do I sign in to Microsoft Sentinel Data Exploration?

Add the server with a setup above. The first time your client connects it opens the sign-in page for microsoft.com; approve it and the tools load.

Is Microsoft Sentinel Data Exploration down?

It answered our last check on 18 October 2026 in 86 ms. Over 10 checks since 5 September 2026 it answered 10.

How do I add Microsoft Sentinel Data Exploration to Cursor?

Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://sentinel.microsoft.com/mcp/data-exploration. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.

Does Microsoft Sentinel Data Exploration need an API key?

It needs a sign-in rather than a key you paste: the server answered with an authentication challenge, so your client runs the login when it first connects.

Where this comes from

Publisher: com.microsoft. Endpoint host: sentinel.microsoft.com. ARD identifier: urn:air:com.microsoft:mcp:sentinel-data-exploration. First indexed 31 August 2026. The tools are exactly what the server returned; nothing on this page is inferred from its name. Ranking in Neuronto search is never for sale.