System · MODEL CONTEXT PROTOCOL
jguimera SecurityCopilotMCPServer
MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testing and uploading Security Copilot artifacts.
WHAT IT CONNECTS
jguimera SecurityCopilotMCPServer 为 AI Agent 提供什么
- **Sentinel Integration**: Execute KQL queries against your Sentinel workspace
- **Security Copilot Management**:
- List existing skillsets/plugins
- Upload new or update existing skillsets/plugins
- Run prompts or skills within Security Copilot
- **Authentication Support**: Multiple authentication methods including interactive browser, client secret, and managed identity
- **Promptbook test and Update**
- **Run Advance Hunting queries in Defender XDR**
- Python 3.8+
- Microsoft Sentinel workspace
- Microsoft Security Copilot access
- Appropriate Azure permissions for Sentinel and Security Copilot
- Clone the repository:
- Install dependencies:
- Create a `.env` file with the following configuration:
- **run_sentinel_query**: Execute KQL queries in Sentinel
- **get_skillsets**: List skillsets in Security Copilot
- **upload_plugin**: Upload or update a skillset/plugin
- **run_prompt**: Run a prompt or skill in Security Copilot
- Cursor Project Rules (securitycopilotdev.mdc): This file include some Custom Cursor Rules to help the agents in the process definition and understanding user prompts.
- MCP Client Configuration (mcp.json): File that connects Cursor to the MCP server.
- Fork the repository
- Create your feature branch (`git checkout -b feature/amazing-feature`)
- Commit your changes (`git commit -m 'Add some amazing feature'`)
- Push to the branch (`git push origin feature/amazing-feature`)
- Open a Pull Request
SECURITY
MCP 收录不等于安全审核
MCP 服务器可能获得模型上下文、凭据、本地文件或调用外部系统的权限。连接 Agent 前,请检查代码、环境变量、网络行为、软件包来源与维护状态。