Msdefenderkql MCP Server
io.github.trickyfalcon/mcp-msdefenderkqlv1.0.2
Execute KQL queries against Microsoft Defender Advanced Hunting via natural language.
context tax
queued
security
queued
cold start
queued
freshness
Stale7mo ago
Install Msdefenderkql MCP server
Install in Claude Code
claude mcp add msdefenderkql -- uvx mcp-msdefenderkqlInstall in Cursor
{
"mcpServers": {
"msdefenderkql": {
"command": "uvx",
"args": [
"mcp-msdefenderkql"
]
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"msdefenderkql": {
"command": "uvx",
"args": [
"mcp-msdefenderkql"
]
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"msdefenderkql": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-msdefenderkql"
]
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"msdefenderkql": {
"command": "uvx",
"args": [
"mcp-msdefenderkql"
]
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Freshness
Stale — last maintenance signal 7mo ago. The newest of the signals below sets the band.
Last commit (default branch)
no data · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-03-16 · 7mo ago · official registry · v1.0.2
FAQ
›How do I install the Msdefenderkql MCP server in Claude Code?
Run: claude mcp add msdefenderkql -- uvx mcp-msdefenderkql. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Msdefenderkql require an API key?
No required environment variables are declared in its published metadata.
›Can I use Msdefenderkql as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is Msdefenderkql in the official MCP registry?
Yes, as io.github.trickyfalcon/mcp-msdefenderkql.