mcp-registry/io.github.trickyfalcon/mcp-msdefenderkql
As of —, the Trickyfalcon Msdefenderkql MCP server is unknown.
Execute KQL queries against Microsoft Defender Advanced Hunting via natural language.
No hosted endpoint — run locally over stdio from the pypi package `mcp-msdefenderkql` (e.g. `pipx run mcp-msdefenderkql`).
Compare: most reliable data servers · most reliable security servers
Glimind tells agents whether a server is up right now and how to call it, then fails over to a live alternative when it isn't.
Claude Code
claude mcp add --transport http glimind https://glimind.com/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"glimind": {
"type": "http",
"url": "https://glimind.com/mcp"
}
}
}
As of —, the Trickyfalcon Msdefenderkql MCP server is unknown.
Trickyfalcon Msdefenderkql MCP server advertises 2 tools, including get_hunting_schema, run_hunting_query.
No hosted endpoint — run locally over stdio from the pypi package `mcp-msdefenderkql` (e.g. `pipx run mcp-msdefenderkql`).
Status page: 90-day uptime, every outage and how long it lasted.
Claim this listing to get the Verified operator marker, a remediation checklist and owner analytics, or embed the live badge from any of the tool pages above. Maintainers: alerts, deploy attestation and monthly reports.
Status is an automated estimate from Glimind's liveness checks (handshake and tool listing only; no tool is ever called) and may lag or differ from your network. Glimind is not affiliated with this server or its operator. Operator? Request a correction or opt out at https://glimind.com/opt-out.