Microsoft Sentinel Data Explorationvf.sr

Claude Code

1. Run this in a terminal, in your project folder:

claude mcp add --transport http microsoft-sentinel https://sentinel.microsoft.com/mcp/data-exploration

1. Start Claude Code, type /mcp, pick microsoft-sentinel and choose Authenticate. A browser window opens for the Microsoft sign-in.

Add --scope user to make it available in every project, not just this one.

Claude Desktop

1. Open Settings → Connectors and click Add custom connector.
2. Name it Microsoft Sentinel Data Exploration and paste this URL:

https://sentinel.microsoft.com/mcp/data-exploration

1. Click Add, then Connect, and sign in when Microsoft asks.

Claude Desktop's JSON config file only starts local servers. Remote servers go through Connectors, and connectors you add on claude.ai show up here too.

claude.ai

1. Open the connector form on claude.ai. This button fills in the name and URL for you:

Add to claude.ai a11y.new_tab

1. Check that the URL reads https://sentinel.microsoft.com/mcp/data-exploration and click Add.
2. Click Connect and sign in when Microsoft asks.

Free plans allow one custom connector. On Team and Enterprise plans an owner adds it under Organization settings → Connectors.

ChatGPT

1. On chatgpt.com, open Settings → Security and login and turn on Developer mode.
2. Go to chatgpt.com/plugins and click + to create an app for a remote MCP server.
3. Paste https://sentinel.microsoft.com/mcp/data-exploration as the server URL and choose OAuth. ChatGPT sends you to Microsoft to sign in.

Developer mode is available on the web for Plus, Pro, Business, Enterprise and Education accounts.

Cursor

Add to Cursor a11y.new_tab

Or add it by hand to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project):

{
  "mcpServers": {
    "microsoft-sentinel": {
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

Cursor shows Needs login next to the server. Click it to sign in.

VS Code

Install in VS Code a11y.new_tab

Or from a terminal:

code --add-mcp '{"name":"microsoft-sentinel","type":"http","url":"https://sentinel.microsoft.com/mcp/data-exploration"}'

Or commit it to the repo in .vscode/mcp.json:

{
  "servers": {
    "microsoft-sentinel": {
      "type": "http",
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

VS Code asks you to sign in the first time the server starts.

Devin Desktop

1. Add it to ~/.config/devin/mcp_config.json (macOS and Linux) or %APPDATA%\devin\mcp_config.json (Windows):

{
  "mcpServers": {
    "microsoft-sentinel": {
      "serverUrl": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

1. Refresh the MCP server list in Cascade and sign in when asked.

Devin Desktop is the new name for Windsurf. It reads serverUrl (or url) for remote servers.

Codex

codex mcp add microsoft-sentinel --url https://sentinel.microsoft.com/mcp/data-exploration
codex mcp login microsoft-sentinel

Or edit ~/.codex/config.toml directly:

[mcp_servers.microsoft-sentinel]
url = "https://sentinel.microsoft.com/mcp/data-exploration"

Gemini CLI

gemini mcp add --transport http microsoft-sentinel https://sentinel.microsoft.com/mcp/data-exploration

Then, inside Gemini CLI, run /mcp auth microsoft-sentinel to sign in.

This adds it to the current project. Add -s user to use it everywhere.

Any client

Most clients accept this shape. Some name the URL field differently: serverUrl in Devin Desktop, httpUrl in Gemini CLI's settings file.

{
  "mcpServers": {
    "microsoft-sentinel": {
      "type": "http",
      "url": "https://sentinel.microsoft.com/mcp/data-exploration"
    }
  }
}

Zed puts servers under context_servers in its settings. Cline needs "type": "streamableHttp", or it assumes SSE.

Client only starts local servers? Bridge it with npx -y mcp-remote https://sentinel.microsoft.com/mcp/data-exploration.

listing.em.badge

[![Microsoft Sentinel Data Exploration on mcp.tc](https://mcp.tc/i/microsoft-sentinel/badge.svg)](https://mcp.tc/i/microsoft-sentinel)

<a href="https://mcp.tc/i/microsoft-sentinel"><img src="https://mcp.tc/i/microsoft-sentinel/badge.svg" alt="Microsoft Sentinel Data Exploration on mcp.tc" height="20"></a>

listing.em.badge_note

listing.em.widget

<script src="https://mcp.tc/w/microsoft-sentinel.js" async></script>

listing.em.widget_note

iframe

<iframe src="https://mcp.tc/embed/microsoft-sentinel" title="Microsoft Sentinel Data Exploration on mcp.tc" width="420" height="200" loading="lazy" allow="clipboard-write" style="border:0;border-radius:8px;max-width:100%"></iframe>

listing.em.iframe_note

JSON

listing.em.json

https://mcp.tc/i/microsoft-sentinel.json

listing.em.fields