Skip to content
Cloud InfrastructureAuto-generatedScore: 28

Security Center MCP Server

The Security Center API, provided by the Microsoft Security resource provider, serves as the programmatic interface to the Azure Security Center's adaptive network hardening capabilities.

Quick Start Summary

The Security Center MCP server is a Model Context Protocol bridge that connects AI assistants — including Claude Desktop, Cursor, Windsurf, and VS Code Copilot — to the Security Center API through natural language. It exposes 3 API endpoints as callable tools, such as AdaptiveNetworkHardenings_ListByExtendedResource, AdaptiveNetworkHardenings_Get, AdaptiveNetworkHardenings_Enforce. No authentication is required — setup takes approximately 30 seconds. The server uses STDIO transport and can be installed by running npx -y @mcp/azure-com-security-adaptivenetworkhardenings. This integration is sourced from the auto Security Center OpenAPI specification (v2015-06-01-preview) and has a quality score of 28/99 (fair documentation coverage).

3Endpointstools mapped
NoneAuthopen access
28/99Qualityfair
~30 secSetupno auth

Server Details

Category
Cloud Infrastructure
Authentication
None
Endpoints
3 operations
Transport
STDIO
Spec Version
v2015-06-01-preview
Install Command
npx -y @mcp/azure-com-security-adaptivenetworkhardenings

Environment Variables

SECURITY_CENTER_API_KEY

Example: your_security_center_api_key

Top Endpoints

GET
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceNamespace}/{resourceType}/{resourceName}/providers/Microsoft.Security/adaptiveNetworkHardenings

AdaptiveNetworkHardenings_ListByExtendedResource

GET
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceNamespace}/{resourceType}/{resourceName}/providers/Microsoft.Security/adaptiveNetworkHardenings/{adaptiveNetworkHardeningResourceName}

AdaptiveNetworkHardenings_Get

POST
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceNamespace}/{resourceType}/{resourceName}/providers/Microsoft.Security/adaptiveNetworkHardenings/{adaptiveNetworkHardeningResourceName}/{adaptiveNetworkHardeningEnforceAction}

AdaptiveNetworkHardenings_Enforce

Own this API?

Verify ownership of this listing to control the description, configuration details, and documentation links. Choose between free manual verification or instant premium placement.

Option 1: Free Verification

Slow manual review. Requires creating a GitHub issue with verified documentation or domain verification.

  • • Verified badge on page
  • • Standard search sorting
  • • 2-3 business days review
Start Free Claim →
Instant & Boosted

Option 2: Featured Upgrade($9/mo)

Instant verification plus premium styling, featured badges, and directory placement boost.

  • • ★ Featured star & amber highlight border
  • • Top of directory search placement
  • • Instant activation via claim token

📖 Detailed MCP Integration Guide

A technical breakdown of capabilities, agent workflows, and security/configuration best practices.

Capabilities & Use Cases
The Security Center API, provided by the Microsoft Security resource provider, serves as the programmatic interface to the Azure Security Center's adaptive network hardening capabilities. Its core function is to enable users to programmatically manage and enforce network security policies designed to protect cloud resources from unauthorized or unintended network exposure. This API specifically focuses on "adaptive network hardenings," a feature that analyzes the effective network access to internet-facing resources (like virtual machines) and provides recommendations to restrict access to only necessary ports, protocols, and IP addresses. The provided endpoints allow for listing all adaptive network hardenings for a specific resource, retrieving details for a single hardening resource, and, most critically, triggering an "enforce" action that programmatically applies the recommended network security group (NSG) rules. This transforms security recommendations into automated, auditable remediation actions, moving beyond mere advisory to active posture management within enterprise cloud environments.
🤖AI Agent Value
When exposed as tools through a Model Context Protocol (MCP) server to an AI coding assistant, this API gains immense practical value by bridging the gap between security operations and development workflows. The AI agent gains the ability to directly query the real-time security posture of infrastructure-as-code deployments or existing cloud resources. Instead of a developer manually navigating the Azure portal to check if a VM's ports are locked down, they can instruct their AI assistant to retrieve the hardening status, interpret the findings, and even initiate enforcement directly from their development environment. This integration transforms security checks from a separate, interruptive task into a seamless, conversational part of the development cycle, enabling security-by-design and compliance automation directly within the tools developers already use.
💬Example Workflows
Developers can leverage this MCP-integrated AI assistant for dynamic, security-centric automation tasks. For example, an engineer could command, "Audit all publicly exposed resources in the staging resource group and enforce all recommended network hardenings to reduce our attack surface before the release," prompting the AI to list resources, assess their exposure, and trigger the enforcement endpoint for each compliant recommendation. Alternatively, a user might instruct, "Check if the web server in production has any open ports beyond 443 and HTTP/80, and if so, generate a draft PR with an NSG update to close them." The AI could then query the adaptive hardenings, identify gaps, and use the returned recommendations to craft precise infrastructure-as-code (IaC) changes. This allows for proactive security governance, automated compliance validation against policies like CIS benchmarks, and the rapid remediation of network-based vulnerabilities as part of continuous integration and deployment pipelines.
🛡️Security & Auth
It is critical to note that while the MCP server's authentication method is listed as "None"—implying the local tool interface may not require a separate credential—the underlying Azure API calls themselves are subject to stringent security controls. All operations require the caller to possess valid Azure Active Directory credentials with appropriate Role-Based Access Control (RBAC) permissions, such as the "Security Admin" or "Contributor" role within the target subscription. Developers must adhere to the principle of least privilege, granting the AI assistant's service principal only the permissions necessary to perform its intended tasks (e.g., reading security posture and modifying NSGs). Best practices include storing any Azure credentials used by the MCP server securely in a vault, enabling and monitoring Azure Activity Logs for all enforcement actions, and implementing approval workflows for the "enforce" action in production environments to prevent unintended configuration drift or service disruptions.

Similar APIs

Other APIs in the Cloud Infrastructure category.

Related MCP Server Integrations

Supabase API MCP Setup

Manage Supabase projects, databases, authentication, and storage through your AI agent.

Cloud InfrastructureConfigure →

Cloudflare API MCP Setup

Manage Cloudflare DNS, CDN, Workers, and security settings through your AI agent.

Cloud InfrastructureConfigure →

Vercel API MCP Setup

Deploy projects, manage domains, and monitor deployments through your AI agent.

Cloud InfrastructureConfigure →

DigitalOcean API MCP Setup

The DigitalOcean API is a comprehensive, RESTful interface provided by DigitalOcean, a leading cloud infrastructure provider focused on simplifying cloud computing for developers, startups, and enterprises. It serves as the programmatic backbone for managing the entire DigitalOcean ecosystem, enabling users to provision, configure, and control cloud resources such as Droplets (virtual private servers), Kubernetes clusters, managed databases, networks, storage volumes, and application platforms. Core capabilities include full lifecycle management of these resources, from creation and scaling to monitoring and deletion, mirroring the functionality available in the DigitalOcean control panel. Its primary use cases range from automating infrastructure setup for CI/CD pipelines and enabling infrastructure-as-code practices to supporting dynamic application scaling and resource optimization for SaaS products, e-commerce sites, and development environments. The API is designed for both developers seeking to automate their cloud operations and businesses that require programmable, scalable cloud infrastructure without the complexity of larger hyperscale providers.

Cloud InfrastructureConfigure →

Access Analyzer MCP Setup

The AWS Identity and Access Management Access Analyzer API provides a powerful, policy-as-code service that automatically identifies resources accessible from outside your AWS account or organization. At its core, the service continuously evaluates resource-based policies—such as Amazon S3 bucket policies, AWS Identity and Access Management (IAM) roles, Amazon KMS key policies, and AWS Lambda function policies—using logic-based reasoning to determine which resources grant access to unknown external principals. Its primary use case is for security and compliance teams within enterprises to proactively detect unintended data exposure, enforce least privilege principles, and audit cross-account and cross-service access. The API endpoints allow programmatic control to create, configure, and query analyzers, manage archive rules for storing findings, and generate custom policy documents, making it a foundational tool for automating cloud security posture management at scale.

Cloud InfrastructureConfigure →