System · MODEL CONTEXT PROTOCOL

jguimera SecurityCopilotMCPServer

MCP Server that integrates with Security Copilot, Sentinel and other tools (in the future). It enhance the process of developing , testing and uploading Security Copilot artifacts.

WHAT IT CONNECTS

jguimera SecurityCopilotMCPServer 为 AI Agent 提供什么

  • **Sentinel Integration**: Execute KQL queries against your Sentinel workspace
  • **Security Copilot Management**:
  • List existing skillsets/plugins
  • Upload new or update existing skillsets/plugins
  • Run prompts or skills within Security Copilot
  • **Authentication Support**: Multiple authentication methods including interactive browser, client secret, and managed identity
  • **Promptbook test and Update**
  • **Run Advance Hunting queries in Defender XDR**
  • Python 3.8+
  • Microsoft Sentinel workspace
  • Microsoft Security Copilot access
  • Appropriate Azure permissions for Sentinel and Security Copilot
  • Clone the repository:
  • Install dependencies:
  • Create a `.env` file with the following configuration:
  • **run_sentinel_query**: Execute KQL queries in Sentinel
  • **get_skillsets**: List skillsets in Security Copilot
  • **upload_plugin**: Upload or update a skillset/plugin
  • **run_prompt**: Run a prompt or skill in Security Copilot
  • Cursor Project Rules (securitycopilotdev.mdc): This file include some Custom Cursor Rules to help the agents in the process definition and understanding user prompts.
  • MCP Client Configuration (mcp.json): File that connects Cursor to the MCP server.
  • Fork the repository
  • Create your feature branch (`git checkout -b feature/amazing-feature`)
  • Commit your changes (`git commit -m 'Add some amazing feature'`)
  • Push to the branch (`git push origin feature/amazing-feature`)
  • Open a Pull Request

SECURITY

MCP 收录不等于安全审核

MCP 服务器可能获得模型上下文、凭据、本地文件或调用外部系统的权限。连接 Agent 前,请检查代码、环境变量、网络行为、软件包来源与维护状态。