Microsoft Sentinel Knowledge Objects (PrPr)

https://sentinel.microsoft.com/mcp/knowledge-objects

● healthy

The Knowledge Objects MCP tool enables natural-language analysis of Microsoft Sentinel knowledge objects to explore relationships and uncover security insights. Currently in private preview.

Transport

sse

Auth

—

Cost

—

Protocol revision

—

MCP readiness

D · 43/100

Readiness is how fully this listing follows its protocol and how it behaved in our probes over 30 days. It is shown for reference and does not move it in search. Search order and leaderboards use the separate quality grade (here C, 48.5/100), which weighs availability, conformance, p95 speed and descriptor. How the two differ

Valid MCP handshake	0/10	Handshake needs credentials (HTTP 401); not readable anonymously.
Live MCP endpoint	15/25	Endpoint requires authentication or payment (668 ms).
Protocol revision	0/10	No protocol revision reported by initialize.
Signed descriptor	n/a	No MCP standard defines a signed server descriptor.
Uptime (30 days)	15/15	22/22 probes succeeded over 30 days (100%).
Tool declaration	0/10	No tools listed by tools/list.
Verified identity	5/10	Publisher declared (repository, package or homepage); claim this listing to verify domain control.
Freshness + modern flags	4/5	seen in a source within 7 days.
Auth declaration	0/5	How to authenticate is not stated.

Applicable criteria total 90 points, scaled to 100.

Responsiveness: Responsive (668 ms; bands ≤2.5 s, ≤5 s, ≤8 s, slower; penalty only).

Measured 2026-11-11.

Nine criteria, the same as the A2A readiness score, read from our daily MCP probe (initialize + tools/list) and 30-day probe history. No MCP standard defines a signed server descriptor, so that criterion is n/a and the other 90 points are scaled to 100. Grades: A>=90, B>=75, C>=60, D>=40, F<40. Display only: search order uses the quality grade.

Compared with peers

Against 53,021 reachable MCP servers in our daily snapshot (2026-11-12 01:39 UTC). Display only; it does not change search order.

Readiness: Higher than 15% of peers; This listing 43 · peer median 81
Latency: Faster than 55% of peers; This listing 291 ms · peer median 326 ms

Where it loses the most points, and how to win them back

Valid MCP handshake −10 — Complete the MCP handshake without errors.
Now: Handshake needs credentials (HTTP 401); not readable anonymously.
Live MCP endpoint −10 — Answer initialize and tools/list at the declared endpoint.
Now: Endpoint requires authentication or payment (668 ms).
Protocol revision −10 — Support the current protocol revision.
Now: No protocol revision reported by initialize.

How many agent tools actually work · All statistics

Adoption signals

Public signals from outside this directory, shown for context. They do not change search order or grades.

Site rank (Tranco): #11 of the top 1M; microsoft.com · list of 2026-11-10

Listed in

Directories this entry was found in.

agenstry since 2026-10-22 ↗

How to connect

MCP endpoint (sse)

https://sentinel.microsoft.com/mcp/knowledge-objects

JSON-RPC initialize probe

curl -X POST https://sentinel.microsoft.com/mcp/knowledge-objects \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}'

Homepage

https://sentinel.microsoft.com

Listed at (agenstry)

https://agenstry.com/mcp/azure:ms-sentinel-knowledge-objects