Projects
Project pages go up when the underlying work is shipped and stable — not before.
mcp-defender-xdr
An MCP server that exposes Microsoft Defender XDR — Advanced Hunting KQL, incidents, and alerts — to Claude. Read-only, certificate auth, multi-tenant.
mcp-sentinel-detection-engine
An MCP server exposing a Sigma → KQL → Microsoft Sentinel Terraform pipeline to Claude. Local stdio, certificate-based Azure auth, read-only by construction.