Cloud · MODEL CONTEXT PROTOCOL
netwrix mcp server naa
MCP Server for Netwrix Access Analyzer
WHAT IT CONNECTS
What netwrix mcp server naa gives an AI Agent
- SQL Server integration with automatic connection on startup
- Dynamic database schema exploration
- SQL query execution
- Netwrix Access Analyzer File System tools
- Python 3.12 or higher
- MCP SDK
- pyodbc 4.0.39 or higher (for SQL Server connectivity)
- python-dotenv 1.0.0 or higher (for environment variable management)
- ODBC Driver 17 for SQL Server or later (must be installed on your system)
- **macOS**: Install using Homebrew: `brew install microsoft/mssql-release/msodbcsql17`
- **Windows**: Download and install from the [Microsoft ODBC Driver page](https://learn.microsoft.com/en-us/sql/connect/odbc/download-odbc-driver-for-sql-server)
- **Linux**: Follow [Microsoft's instructions](https://learn.microsoft.com/en-us/sql/connect/odbc/linux-mac/installing-the-microsoft-odbc-driver-for-sql-server) for your distribution
- Create a `.env` file in your project directory with your SQL Server connection details:
- Replace the example values with your actual database connection information.
- Open Claude Desktop
- Navigate to the Claude Desktop configuration file:
- macOS: `~/Library/Application Support/Claude/claude_desktop_config.json`
- Windows: `%APPDATA%\Claude\claude_desktop_config.json`
- Add the following configuration to the `mcpServers` section.
- Restart Claude Desktop
- Replace `/path/to/your/uv` with the actual path to your `uv` executable (find with `which uv` or `where uv`), and update the path to your `main.py` file as well as the database connection information.
- Restart Claude Desktop to apply the changes
- `server`: SQL Server address
- `database`: Database name
- `username`: SQL Server username (optional if using Windows auth)
- `password`: SQL Server password (optional if using Windows auth)
- `trusted_connection`: Boolean flag for Windows Authentication
- `table_name`: Name of the table to explain
- `table_name`: Name of the table to get schema for.
- `tablename`: Name of the table to sample
- `trustee`: Domain\Username format
- `levelsdown`: How many directory levels to traverse (default: 0)
- `trustee`: Domain\Username format
- `resourcepath`: Path to the resource
- `resource`: Path to the resource
- `resource`: Path to the resource
- Verify your SQL Server is running and accessible from your network
- Check your credentials in the `.env` file
- Ensure the ODBC driver is correctly installed
- Check the logs for detailed error messages
- Use the full path to `uv` in your configuration (use `which uv` or `where uv` to find it)
- Make sure you've restarted Claude Desktop after configuration changes
- Check the Claude logs for any error messages related to the MCP server
SECURITY
An MCP listing is not a security review
An MCP server may receive model context, credentials, local files, or permission to call external systems. Review its code, requested environment variables, network behavior, package provenance, and maintenance status before connecting it to an agent.
README
Repository documentation
An MCP server for Netwrix Access Analyzer, designed to integrate with Claude Desktop. Currently supports Active Directory and File System solutions.
- SQL Server integration with automatic connection on startup
- Dynamic database schema exploration
- SQL query execution
- Netwrix Access Analyzer File System tools
This MCP server requires the following dependencies:
- Python 3.12 or higher
- MCP SDK
- pyodbc 4.0.39 or higher (for SQL Server connectivity)
- python-dotenv 1.0.0 or higher (for environment variable management)
- ODBC Driver 17 for SQL Server or later (must be installed on your system)
This MCP Server requires Netwrix Access Analyzer (NAA) File System or Active Directory scans to be completed.
| Solution | Tool Name | Description |
|---|---|---|
| Active Directory | Get-ADEffectiveMembership | Discovers effective group membership in AD with filters. |
| Active Directory | Get-ADExceptions | Retrieves AD exceptions with optional filters. |
| Active Directory | Get-ADPermissions | Retrieves AD permissions from the permissions view with filters. |
| Active Directory | Get-DomainControllers | Lists domain controllers. |
| Active Directory | Get-CertificateVulnerabilities | Lists certificate vulnerabilities. |
| Active Directory | Get-ADCARights | Lists AD CA rights. |
| Active Directory | Get-ADSecurityAssessment | Retrieves AD security assessment results. |
| Active Directory | Get-ADUsers | Retrieves AD user details with filters. |
| Active Directory | Get-ADGroups | Retrieves AD group details with filters. |
| Active Directory | Get-ADComputers | Retrieves AD computer details with filters. |
| Database | Connect-Database | Connects to a specified MSSQL database. |
| Database | Show-ConnectionStatus | Shows the current DB connection status. |
| Database | Show-TableSchema | Shows the schema for a given table. |
| File System | Discover-SensitiveData | Discovers where sensitive data exists (DLP matches). |
| File System | Get-OpenShares | Finds open shares accessible to broad groups. |
| File System | Get-TrusteeAccess | Finds resources where a trustee has access. |
| File System | Get-TrusteePermissionSource | Finds the source of access for a trustee/resource. |
| File System | Get-ResourceAccess | Gets effective access for a resource path. |
| File System | Get-UnusedAccess | Finds users with unused access to a share. |
| File System | Get-RunningJobs | Lists running Netwrix Access Auditor jobs. |
| File System | Get-ShadowAccess | Retrieves details about shadow access. |
-
Install Claude Desktop
- Download and install Claude Desktop from the official website: https://claude.ai/download
- Follow the installation prompts for your operating system (macOS, Windows, or Linux).
-
Clone this repository
git clone https://github.com/netwrix/mcp-server-naa.git cd mcp-server-naa -
Connect Claude Desktop to this Server
- Add the following
uvconfiguration to your Claude Desktop MCP Configuration:
"NAA_AD": { "command": "/path/to/uv", "args": [ "run", "--with", "pyodbc", "fastmcp", "run", "/path/to/mcp-server-naa/run.py" ], "env": { "DB_SERVER": "HOST OR IP", "DB_NAME": "DATABASENAME", "DB_USER": "USERNAME", "DB_PASSWORD": "PASSWORD", "DB_USE_WINDOWS_AUTH": "FALSE|TRUE" } } - Add the following
If you encounter connection issues:
- Verify your SQL Server is running and accessible from your network
- Check your credentials in the .env file
- Ensure the ODBC driver is correctly installed
- Check the logs for detailed error messages
If Claude Desktop can't find the uv command:
- Use the full path to uv in your configuration (use which uv or where uv to find it)
- Make sure you've restarted Claude Desktop after configuration changes
- Check the Claude logs for any error messages related to the MCP server
If you need help using this MCP server or understanding your results, just visit the Netwrix Community - we’re here to help!
COMMUNITY