Mcp Defender

Mcp Defender is an open-source Model Context Protocol (MCP) server that enables AI assistants to perform advanced security investigations on Microsoft Defender's Advanced Hunting API. By translating natural language queries into KQL and executing them against Microsoft's security data, Mcp Defender empowers security analysts and AI systems to identify and explain suspicious activities, such as failed logins or PowerShell misuse, using conversational queries. Ideal for security teams, automation engineers, and anyone integrating AI incident response with Defender.