jguimera SecurityCopilotMCPServer

WHAT IT CONNECTS

What jguimera SecurityCopilotMCPServer gives an AI Agent

• **Sentinel Integration**: Execute KQL queries against your Sentinel workspace
• **Security Copilot Management**:
• List existing skillsets/plugins
• Upload new or update existing skillsets/plugins
• Run prompts or skills within Security Copilot
• **Authentication Support**: Multiple authentication methods including interactive browser, client secret, and managed identity
• **Promptbook test and Update**
• **Run Advance Hunting queries in Defender XDR**
• Python 3.8+
• Microsoft Sentinel workspace
• Microsoft Security Copilot access
• Appropriate Azure permissions for Sentinel and Security Copilot
• Clone the repository:
• Install dependencies:
• Create a `.env` file with the following configuration:
• **run_sentinel_query**: Execute KQL queries in Sentinel
• **get_skillsets**: List skillsets in Security Copilot
• **upload_plugin**: Upload or update a skillset/plugin
• **run_prompt**: Run a prompt or skill in Security Copilot
• Cursor Project Rules (securitycopilotdev.mdc): This file include some Custom Cursor Rules to help the agents in the process definition and understanding user prompts.
• MCP Client Configuration (mcp.json): File that connects Cursor to the MCP server.
• Fork the repository
• Create your feature branch (`git checkout -b feature/amazing-feature`)
• Commit your changes (`git commit -m 'Add some amazing feature'`)
• Push to the branch (`git push origin feature/amazing-feature`)
• Open a Pull Request