Skip to content
Cloud InfrastructureAuto-generatedScore: 28

Security Center MCP Server

The Microsoft Security Center API for Discovered Security Solutions serves as a critical interface for querying and cataloging the security tooling landscape across an Azure environment.

Quick Start Summary

The Security Center MCP server is a Model Context Protocol bridge that connects AI assistants — including Claude Desktop, Cursor, Windsurf, and VS Code Copilot — to the Security Center API through natural language. It exposes 3 API endpoints as callable tools, such as DiscoveredSecuritySolutions_List, DiscoveredSecuritySolutions_ListByHomeRegion, DiscoveredSecuritySolutions_Get. No authentication is required — setup takes approximately 30 seconds. The server uses STDIO transport and can be installed by running npx -y @mcp/azure-com-security-discoveredsecuritysolutions. This integration is sourced from the auto Security Center OpenAPI specification (v2015-06-01-preview) and has a quality score of 28/99 (fair documentation coverage).

3Endpointstools mapped
NoneAuthopen access
28/99Qualityfair
~30 secSetupno auth

Server Details

Category
Cloud Infrastructure
Authentication
None
Endpoints
3 operations
Transport
STDIO
Spec Version
v2015-06-01-preview
Install Command
npx -y @mcp/azure-com-security-discoveredsecuritysolutions

Environment Variables

SECURITY_CENTER_API_KEY

Example: your_security_center_api_key

Top Endpoints

GET
/subscriptions/{subscriptionId}/providers/Microsoft.Security/discoveredSecuritySolutions

DiscoveredSecuritySolutions_List

GET
/subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/discoveredSecuritySolutions

DiscoveredSecuritySolutions_ListByHomeRegion

GET
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/locations/{ascLocation}/discoveredSecuritySolutions/{discoveredSecuritySolutionName}

DiscoveredSecuritySolutions_Get

Own this API?

Verify ownership of this listing to control the description, configuration details, and documentation links. Choose between free manual verification or instant premium placement.

Option 1: Free Verification

Slow manual review. Requires creating a GitHub issue with verified documentation or domain verification.

  • • Verified badge on page
  • • Standard search sorting
  • • 2-3 business days review
Start Free Claim →
Instant & Boosted

Option 2: Featured Upgrade($9/mo)

Instant verification plus premium styling, featured badges, and directory placement boost.

  • • ★ Featured star & amber highlight border
  • • Top of directory search placement
  • • Instant activation via claim token

📖 Detailed MCP Integration Guide

A technical breakdown of capabilities, agent workflows, and security/configuration best practices.

Capabilities & Use Cases
The Microsoft Security Center API for Discovered Security Solutions serves as a critical interface for querying and cataloging the security tooling landscape across an Azure environment. Provided by Microsoft as part of the Azure Security Center resource provider, this API focuses specifically on the visibility and discovery of security solutions deployed within subscriptions and resource groups. Its core capability is to enumerate and detail security products—both native Azure services (like Microsoft Defender for Cloud) and integrated third-party solutions—that are monitoring and protecting cloud resources. For enterprise customers, this transforms security management from a manual inventory task into a programmatic function. Use cases include automated compliance reporting to track which solutions are deployed, security posture management to identify gaps in monitoring coverage, and cost optimization by auditing which third-party agents or services are active versus licensed. It enables security architects and operations teams to maintain a real-time, queryable manifest of their defensive tooling, which is foundational for effective governance and incident response planning in large-scale, multi-subscription environments.
🤖AI Agent Value
Exposing these API endpoints through a Model Context Protocol (MCP) server to an AI coding assistant like Claude Desktop or Cursor unlocks a powerful paradigm for intelligent security operations automation. The value lies in transforming the AI from a static code generator into a dynamic, context-aware security agent. Instead of manually writing scripts to query Azure Resource Manager for this data, a developer can simply instruct the AI to "list all discovered security solutions in our production subscription" or "compare the security tools in the staging environment against our gold standard baseline." The AI, acting through the MCP server, can execute the precise API calls, parse the JSON responses, and synthesize the information into actionable insights or formatted reports. This integration bridges the gap between infrastructure-as-data and natural language operation, allowing developers to interact with their cloud security posture as if consulting a knowledgeable expert, thereby dramatically accelerating audit tasks, environment documentation, and gap analysis workflows.
💬Example Workflows
Within a practical development workflow, the AI agent empowered by this MCP server can perform a variety of dynamic, context-rich tasks. For instance, a developer could command: "Audit my Azure subscription 'Sub-123' and generate a Markdown table listing all discovered security solutions, their resource locations, and whether they are native or third-party." The AI would execute the appropriate GET request to the /subscriptions/{subscriptionId}/providers/Microsoft.Security/discoveredSecuritySolutions endpoint, process the data, and produce the structured output. Another advanced workflow might involve: "Analyze the security solutions in resource group 'RG-Prod-DB' under location 'eastus' and suggest any critical gaps based on common compliance frameworks." Here, the AI would query the more specific endpoints for that resource group and location, analyze the returned solution names and types, and leverage its training to reason about potential missing controls (e.g., no endpoint protection listed for VMs), offering a preliminary risk assessment. This transforms routine checks into conversational, iterative exploration and planning sessions.
🛡️Security & Auth
Critical configuration and security considerations are paramount when deploying this API via an MCP server. Although the API specification may indicate "None" for authentication, this is a misnomer in practice; all access to Azure Resource Manager APIs, including Security Center, requires proper Azure Active Directory (Azure AD) authentication and authorization. Developers must configure the MCP server with a credential (such as a service principal with a certificate or managed identity) that has been granted the appropriate Azure RBAC roles—typically "Security Reader" or a custom role with Microsoft.Security/discoveredSecuritySolutions/read permissions at the target scope. Following the principle of least privilege is essential: the identity should only have read access to the specific subscriptions or resource groups it needs to audit, never broad, write, or administrative permissions. Furthermore, developers must ensure the MCP server is deployed in a secure network context, with API requests made over TLS 1.2+ and credentials stored securely using solutions like Azure Key Vault. This careful setup ensures the AI agent has the necessary, but tightly controlled, visibility to perform its duties without becoming a vector for unintended exposure or privilege escalation.

Similar APIs

Other APIs in the Cloud Infrastructure category.

Related MCP Server Integrations

Supabase API MCP Setup

Manage Supabase projects, databases, authentication, and storage through your AI agent.

Cloud InfrastructureConfigure →

Cloudflare API MCP Setup

Manage Cloudflare DNS, CDN, Workers, and security settings through your AI agent.

Cloud InfrastructureConfigure →

Vercel API MCP Setup

Deploy projects, manage domains, and monitor deployments through your AI agent.

Cloud InfrastructureConfigure →

DigitalOcean API MCP Setup

The DigitalOcean API is a comprehensive, RESTful interface provided by DigitalOcean, a leading cloud infrastructure provider focused on simplifying cloud computing for developers, startups, and enterprises. It serves as the programmatic backbone for managing the entire DigitalOcean ecosystem, enabling users to provision, configure, and control cloud resources such as Droplets (virtual private servers), Kubernetes clusters, managed databases, networks, storage volumes, and application platforms. Core capabilities include full lifecycle management of these resources, from creation and scaling to monitoring and deletion, mirroring the functionality available in the DigitalOcean control panel. Its primary use cases range from automating infrastructure setup for CI/CD pipelines and enabling infrastructure-as-code practices to supporting dynamic application scaling and resource optimization for SaaS products, e-commerce sites, and development environments. The API is designed for both developers seeking to automate their cloud operations and businesses that require programmable, scalable cloud infrastructure without the complexity of larger hyperscale providers.

Cloud InfrastructureConfigure →

Access Analyzer MCP Setup

The AWS Identity and Access Management Access Analyzer API provides a powerful, policy-as-code service that automatically identifies resources accessible from outside your AWS account or organization. At its core, the service continuously evaluates resource-based policies—such as Amazon S3 bucket policies, AWS Identity and Access Management (IAM) roles, Amazon KMS key policies, and AWS Lambda function policies—using logic-based reasoning to determine which resources grant access to unknown external principals. Its primary use case is for security and compliance teams within enterprises to proactively detect unintended data exposure, enforce least privilege principles, and audit cross-account and cross-service access. The API endpoints allow programmatic control to create, configure, and query analyzers, manage archive rules for storing findings, and generate custom policy documents, making it a foundational tool for automating cloud security posture management at scale.

Cloud InfrastructureConfigure →