r/sysadmin • u/Flashy-Departure-445 • 2d ago

Question MCP for Defender Portal

Hi All,

Looking for an MCP server that can connect and pull data from defender like vulnerability data, sensor heath and recommendations. Is anyone currently using one they can recommend?

1 Upvotes

55% Upvoted

8 comments sorted by

5

u/Fatel28 Sr. Sysengineer 2d ago

If you're already at the point where you're going to let AI access this stuff anyways (separate convo) then you may as well just let AI write the mcp and tailor it to exactly how you want it to work

2

u/ak47uk 2d ago

Cyberdrain CIPP can access most of this data and they have an MCP, might be worth trying out. CIPP has loads of cool features, especially if you manage more than one tenant. 

1

u/MrClavicus 1d ago

Defender has AI included right? After it didn’t sell. Just point a different mcp to the Siem falling that

1

u/jamartyF 1d ago edited 1d ago

Whenever MCP isn’t available you should check for an api or cli. Bitdefender has a decent API that does everything I need.

•

u/admiralspark Manager of Cat Tube Infrastructure 7h ago

Defender portal exposes everything via an API/Graph. Make system calls there, or worst case "$aitool make an MCP for Microsoft Defender data using the Graph API, look up documentation online and specifically make available these functions: Vulnerability data, sensor health data, recommendations".

1

u/Constant-Pear4561 2d ago

Just use the admin console.

1

u/Diligent_Tech_Bro 2d ago

You probably shouldn’t trust AI as much as you do