Connectors · Identity & security
Microsoft Defender for Endpoint MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Microsoft Defender for Endpoint and the rest of your systems. It gives your agent 110 Microsoft Defender for Endpoint actions (84 reads, 20 writes and 6 that wait for a confirmation) and holds the Microsoft Defender for Endpoint credential itself, so the agent never does. It paces Microsoft Defender for Endpoint's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "microsoft_defender_endpoint.machines.list", intent: "check which Microsoft Defender for Endpoint account is connected"}# List machines · read · 1 upstream call- 110actionsin one signed file
- 84readlook, never change
- 20writecreate and update
- 6wait for a yesdestructive, confirmed first
Set up
Connect Microsoft Defender for Endpoint in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect Microsoft Defender for Endpoint.
OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key.
client_idEntra application (client) idclient_secretEntra client secrettenant_idYour Microsoft Defender for Endpoint tenant id
account { op: "connections.requirements", service: "microsoft_defender_endpoint" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "microsoft_defender_endpoint.machines.list" }# list machines · read · 1 upstream callcheck { action: "microsoft_defender_endpoint.machines.update", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
Microsoft Defender for Endpoint at a glance
- Sign-in
- OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in.
- You provide
client_idclient_secret- Setup fields
tenant_id- Limits we pace to
- 100 calls a minute and 1,500 an hour, per connection
- API covered
- Defender for Endpoint API v1.0 (api.security.microsoft.com/api)
api.security.microsoft.com/api - Built from
- Microsoft Defender for Endpoint's documentation, read 22 October 2026learn.microsoft.com
- Service file
- Version 1.0.0, signed (Ed25519)
- Cached reads
- 84 of 84 reads, for up to 5 minutes; a write clears what it affects
- Shared entities
- 2, so ask can line Microsoft Defender for Endpoint up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in Microsoft Defender for Endpoint.
110 actions in 52 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 84readlook, never change
- 20writecreate and update
- 6destructivewait for a confirmation
Assessments
1616 read · 0 write · 0 destructive
Export security baselines assessment per device (JSON) · Export browser extensions assessment per device (JSON) · Export certificate inventory assessment per device (JSON) · Export non-product-code software inventory per device (JSON)
Machine response
100 read · 9 write · 1 destructive
Collect an investigation package · Isolate a machine from the network · Restrict app execution on a machine · Run a Microsoft Defender Antivirus scan
Machines
75 read · 2 write · 0 destructive
List machines · Get a machine · Update a machine's tags and value · Find a device by internal IP
Alerts
52 read · 3 write · 0 destructive
List alerts · Get an alert · Create an alert from an event · Update an alert
Indicators
51 read · 2 write · 2 destructive
List indicators · Delete indicators in bulk · Delete an indicator · Import indicators in bulk
Machine actions
54 read · 0 write · 1 destructive
List machine actions · Get a machine action · Cancel a pending machine action · Get a live response command result link
Scan definitions
41 read · 2 write · 1 destructive
Create an authenticated scan definition · List authenticated scan definitions · Update an authenticated scan definition · Delete authenticated scan definitions
Scores
33 read · 0 write · 0 destructive
List exposure scores by device group · Get the device secure score · Get the organization exposure score
44 more areas · 55 actions
- Vulnerabilities 3
- Baselines 2
- Investigations 2
- Library files 2
- Machine tags 2
- Recommendations 2
- Remediation tasks 2
- Scan agents 2
- Scan history 2
- Software 2
- Advanced queries 1
- Alert domains 1
- Alert files 1
- Alert ips 1
- Alert machine 1
- Alert user 1
- Browser extensions 1
- Device health 1
- Domain alerts 1
- Domain machines 1
- Domain stats 1
- File alerts 1
- File machines 1
- File stats 1
- Files 1
- Ip alerts 1
- Ip stats 1
- Machine alerts 1
- Machine logon users 1
- Machine missing KBS 1
- Machine recommendations 1
- Machine software 1
- Machine vulnerabilities 1
- Recommendation machines 1
- Recommendation software 1
- Recommendation vulnerabilities 1
- Remediation task machines 1
- Software distributions 1
- Software machines 1
- Software missing KBS 1
- Software vulnerabilities 1
- User alerts 1
- User machines 1
- Vulnerability machines 1
Top actions
The Microsoft Defender for Endpoint API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 13 of Microsoft Defender for Endpoint's 14 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
microsoft_defender_endpoint.machines.listList machines | List onboarded devices with health, risk and exposure. | read | device.endpoint.list65 connectors |
microsoft_defender_endpoint.machines.getGet a machine | Get a machine. | read | device.endpoint.get57 connectors |
microsoft_defender_endpoint.machines.updateUpdate a machine's tags and value | Update a machine's tags and value. | write | device.endpoint.update23 connectors |
microsoft_defender_endpoint.alerts.listList alerts | List Defender for Endpoint alerts, optionally filtered by OData. | read | security.alert.list22 connectors |
microsoft_defender_endpoint.machine_actions.listList machine actions | List machine actions. | read | device.remote_command.list4 connectors |
microsoft_defender_endpoint.alerts.getGet an alert | Get an alert. | read | security.alert.get21 connectors |
microsoft_defender_endpoint.software.listList software inventory | List software inventory. | read | device.software.list11 connectors |
microsoft_defender_endpoint.alerts.create_by_referenceCreate an alert from an event | Create an alert from an event. | write | security.alert.create5 connectors |
microsoft_defender_endpoint.machine_actions.getGet a machine action | Get a machine action. | read | device.remote_command.get3 connectors |
microsoft_defender_endpoint.vulnerabilities.listList vulnerabilities | List vulnerabilities. | read | security.vulnerability.list14 connectors |
microsoft_defender_endpoint.machine_actions.cancelCancel a pending machine action | Cancel a pending machine action. | destructive | device.remote_command.cancel2 connectors |
microsoft_defender_endpoint.machines.isolateIsolate a machine from the network | Isolate a machine from the network. | write | this connector |
Try it
Prompts to paste into Claude.
Each one names the Microsoft Defender for Endpoint actions it will call, so you know what it reads and what it changes before you send it.
- Readread
Which Microsoft Defender for Endpoint alerts are open right now? Group them by service.
calls
microsoft_defender_endpoint.alerts.list - Writewrite
Update a machine's tags and value in Microsoft Defender for Endpoint. Show me exactly what you will send before you save it.
calls
microsoft_defender_endpoint.machines.update
Governance for Microsoft Defender for Endpoint
Destructive actions wait for a yes.
6 Microsoft Defender for Endpoint actions are destructive. These are all of them:
- Cancel a pending machine action
microsoft_defender_endpoint.machine_actions.cancel - Delete an indicator
microsoft_defender_endpoint.indicators.delete - Offboard a machine
microsoft_defender_endpoint.machines.offboard - Delete indicators in bulk
microsoft_defender_endpoint.indicators.batch_delete - Delete a live response library file
microsoft_defender_endpoint.library_files.delete - Delete authenticated scan definitions
microsoft_defender_endpoint.scan_definitions.batch_delete
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Cancel a pending machine action?
intent: the user asked me to cancel a pending machine action
account { op: "keys.create", name: "microsoft-defender-endpoint-agent", allowed_actions: ["microsoft_defender_endpoint.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "microsoft_defender_endpoint.machine_actions.cancel", approver: "[email protected]" }, { match: "microsoft_defender_endpoint.indicators.delete", approver: "[email protected]" }, { match: "microsoft_defender_endpoint.machines.offboard", approver: "[email protected]" } ]}Cost
What Microsoft Defender for Endpoint costs on actionlake.
Every Microsoft Defender for Endpoint action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call Microsoft Defender for Endpoint refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 110 Microsoft Defender for Endpoint actions
- 110actions pageeach page of a long list is one call
- 84reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every Microsoft Defender for Endpoint action.
110 actions by area: the id your agent calls, what it does, and its effect.
Assessments16
microsoft_defender_endpoint.assessments.baseline_compliance.by_machineExport security baselines assessment per device (JSON)readmicrosoft_defender_endpoint.assessments.baseline_compliance.exportExport security baselines assessment per device (download files)readmicrosoft_defender_endpoint.assessments.browser_extensions.by_machineExport browser extensions assessment per device (JSON)readmicrosoft_defender_endpoint.assessments.browser_extensions.exportExport browser extensions assessment per device (download files)readmicrosoft_defender_endpoint.assessments.certificates.by_machineExport certificate inventory assessment per device (JSON)readmicrosoft_defender_endpoint.assessments.certificates.exportExport certificate inventory assessment per device (download files)readmicrosoft_defender_endpoint.assessments.information_gathering.exportExport information gathering assessment (download files)readmicrosoft_defender_endpoint.assessments.non_cpe_software_inventory.by_machineExport non-product-code software inventory per device (JSON)readmicrosoft_defender_endpoint.assessments.non_cpe_software_inventory.exportExport non-product-code software inventory per device (download files)readmicrosoft_defender_endpoint.assessments.secure_config.by_machineExport secure configuration assessment per device (JSON)readmicrosoft_defender_endpoint.assessments.secure_config.exportExport secure configuration assessment per device (download files)readmicrosoft_defender_endpoint.assessments.software_inventory.by_machineExport software inventory assessment per device (JSON)readmicrosoft_defender_endpoint.assessments.software_inventory.exportExport software inventory assessment per device (download files)readmicrosoft_defender_endpoint.assessments.software_vulnerabilities.by_machineExport software vulnerabilities assessment per device (JSON)readmicrosoft_defender_endpoint.assessments.software_vulnerabilities.exportExport software vulnerabilities assessment per device (download files)readmicrosoft_defender_endpoint.assessments.software_vulnerability_changes.by_machineExport software vulnerability changes per device since a time (JSON)read
Machine response10
microsoft_defender_endpoint.machines.collect_investigation_packageCollect an investigation packagewritemicrosoft_defender_endpoint.machines.isolateIsolate a machine from the networkwritemicrosoft_defender_endpoint.machines.offboardOffboard a machinedestructivemicrosoft_defender_endpoint.machines.restrict_code_executionRestrict app execution on a machinewritemicrosoft_defender_endpoint.machines.run_antivirus_scanRun a Microsoft Defender Antivirus scanwritemicrosoft_defender_endpoint.machines.run_live_responseRun live response commands on a machinewritemicrosoft_defender_endpoint.machines.start_investigationStart an automated investigation on a machinewritemicrosoft_defender_endpoint.machines.stop_and_quarantine_fileStop and quarantine a file on a machinewritemicrosoft_defender_endpoint.machines.unisolateRelease a machine from isolationwritemicrosoft_defender_endpoint.machines.unrestrict_code_executionRemove app execution restrictionwrite
Machines7
microsoft_defender_endpoint.machines.find_by_internal_ipFind a device by internal IPreadmicrosoft_defender_endpoint.machines.find_by_ipFind machines seen with an IP addressreadmicrosoft_defender_endpoint.machines.find_by_tagFind machines by tagreadmicrosoft_defender_endpoint.machines.getGet a machinereadmicrosoft_defender_endpoint.machines.listList machinesreadmicrosoft_defender_endpoint.machines.set_device_valueSet a machine's device valuewritemicrosoft_defender_endpoint.machines.updateUpdate a machine's tags and valuewrite
Alerts5
microsoft_defender_endpoint.alerts.batch_updateBatch update alertswritemicrosoft_defender_endpoint.alerts.create_by_referenceCreate an alert from an eventwritemicrosoft_defender_endpoint.alerts.getGet an alertreadmicrosoft_defender_endpoint.alerts.listList alertsreadmicrosoft_defender_endpoint.alerts.updateUpdate an alertwrite
Indicators5
microsoft_defender_endpoint.indicators.batch_deleteDelete indicators in bulkdestructivemicrosoft_defender_endpoint.indicators.deleteDelete an indicatordestructivemicrosoft_defender_endpoint.indicators.importImport indicators in bulkwritemicrosoft_defender_endpoint.indicators.listList indicatorsreadmicrosoft_defender_endpoint.indicators.submitSubmit or update an indicatorwrite
Machine actions5
microsoft_defender_endpoint.machine_actions.cancelCancel a pending machine actiondestructivemicrosoft_defender_endpoint.machine_actions.getGet a machine actionreadmicrosoft_defender_endpoint.machine_actions.get_live_response_resultGet a live response command result linkreadmicrosoft_defender_endpoint.machine_actions.get_package_uriGet the investigation package download URIreadmicrosoft_defender_endpoint.machine_actions.listList machine actionsread
Scan definitions4
microsoft_defender_endpoint.scan_definitions.batch_deleteDelete authenticated scan definitionsdestructivemicrosoft_defender_endpoint.scan_definitions.createCreate an authenticated scan definitionwritemicrosoft_defender_endpoint.scan_definitions.listList authenticated scan definitionsreadmicrosoft_defender_endpoint.scan_definitions.updateUpdate an authenticated scan definitionwrite
Scores3
microsoft_defender_endpoint.configuration_score.getGet the device secure scorereadmicrosoft_defender_endpoint.exposure_score.by_machine_groups.listList exposure scores by device groupreadmicrosoft_defender_endpoint.exposure_score.getGet the organization exposure scoreread
Vulnerabilities3
microsoft_defender_endpoint.vulnerabilities.by_machine_and_software.listList vulnerabilities by machine and softwarereadmicrosoft_defender_endpoint.vulnerabilities.getGet a vulnerabilityreadmicrosoft_defender_endpoint.vulnerabilities.listList vulnerabilitiesread
Baselines2
microsoft_defender_endpoint.baseline_configurations.listList security baseline configurationsreadmicrosoft_defender_endpoint.baseline_profiles.listList security baseline assessment profilesread
Investigations2
microsoft_defender_endpoint.investigations.getGet an automated investigationreadmicrosoft_defender_endpoint.investigations.listList automated investigationsread
Library files2
microsoft_defender_endpoint.library_files.deleteDelete a live response library filedestructivemicrosoft_defender_endpoint.library_files.listList live response library filesread
Machine tags2
microsoft_defender_endpoint.machines.tags.bulk_updateAdd or remove a tag on multiple machineswritemicrosoft_defender_endpoint.machines.tags.updateAdd or remove a machine tagwrite
Recommendations2
microsoft_defender_endpoint.recommendations.getGet a security recommendationreadmicrosoft_defender_endpoint.recommendations.listList security recommendationsread
Remediation tasks2
microsoft_defender_endpoint.remediation_tasks.getGet a remediation activityreadmicrosoft_defender_endpoint.remediation_tasks.listList remediation activitiesread
Scan agents2
microsoft_defender_endpoint.scan_agents.getGet an authenticated scan agentreadmicrosoft_defender_endpoint.scan_agents.listList authenticated scan agentsread
Scan history2
microsoft_defender_endpoint.scan_definitions.history_by_definitionGet scan history by scan definitionreadmicrosoft_defender_endpoint.scan_definitions.history_by_sessionGet scan history by scan sessionread
Software2
microsoft_defender_endpoint.software.getGet a software productreadmicrosoft_defender_endpoint.software.listList software inventoryread
Advanced queries1
microsoft_defender_endpoint.advanced_queries.runRun an advanced hunting queryread
Alert domains1
microsoft_defender_endpoint.alerts.domains.listList domains related to an alertread
Alert files1
microsoft_defender_endpoint.alerts.files.listList files related to an alertread
Alert ips1
microsoft_defender_endpoint.alerts.ips.listList IP addresses related to an alertread
Alert machine1
microsoft_defender_endpoint.alerts.machine.getGet the device related to an alertread
Alert user1
microsoft_defender_endpoint.alerts.user.getGet the user related to an alertread
Browser extensions1
microsoft_defender_endpoint.browser_extensions.permissions.listList browser extension permission informationread
Device health1
microsoft_defender_endpoint.device_av_info.listExport device antivirus health (JSON)read
Domain alerts1
microsoft_defender_endpoint.domains.alerts.listList alerts related to a domainread
Domain machines1
microsoft_defender_endpoint.domains.machines.listList machines that communicated with a domainread
Domain stats1
microsoft_defender_endpoint.domains.stats.getGet domain statisticsread
File alerts1
microsoft_defender_endpoint.files.alerts.listList alerts related to a fileread
File machines1
microsoft_defender_endpoint.files.machines.listList machines related to a fileread
File stats1
microsoft_defender_endpoint.files.stats.getGet file statisticsread
Files1
microsoft_defender_endpoint.files.getGet file informationread
Ip alerts1
microsoft_defender_endpoint.ips.alerts.listList alerts related to an IP addressread
Ip stats1
microsoft_defender_endpoint.ips.stats.getGet IP address statisticsread
Machine alerts1
microsoft_defender_endpoint.machines.alerts.listList alerts on a machineread
Machine logon users1
microsoft_defender_endpoint.machines.logon_users.listList users who logged on to a machineread
Machine missing KBS1
microsoft_defender_endpoint.machines.missing_kbs.listList KBs missing on a machineread
Machine recommendations1
microsoft_defender_endpoint.machines.recommendations.listList security recommendations for a machineread
Machine software1
microsoft_defender_endpoint.machines.software.listList software installed on a machineread
Machine vulnerabilities1
microsoft_defender_endpoint.machines.vulnerabilities.listList vulnerabilities discovered on a machineread
Recommendation machines1
microsoft_defender_endpoint.recommendations.machines.listList machines exposed by a recommendationread
Recommendation software1
microsoft_defender_endpoint.recommendations.software.getGet the software a recommendation applies toread
Recommendation vulnerabilities1
microsoft_defender_endpoint.recommendations.vulnerabilities.listList vulnerabilities a recommendation addressesread
Remediation task machines1
microsoft_defender_endpoint.remediation_tasks.machines.listList devices exposed in a remediation activityread
Software distributions1
microsoft_defender_endpoint.software.distributions.listList software version distributionread
Software machines1
microsoft_defender_endpoint.software.machines.listList machines with a software productread
Software missing KBS1
microsoft_defender_endpoint.software.missing_kbs.listList KBs missing for a software productread
Software vulnerabilities1
microsoft_defender_endpoint.software.vulnerabilities.listList vulnerabilities in a software productread
User alerts1
microsoft_defender_endpoint.users.alerts.listList alerts related to a userread
User machines1
microsoft_defender_endpoint.users.machines.listList machines related to a userread
Vulnerability machines1
microsoft_defender_endpoint.vulnerabilities.machines.listList machines exposed to a vulnerabilityread
Questions
The Microsoft Defender for Endpoint MCP server, answered.
Is there a Microsoft Defender for Endpoint MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 110 Microsoft Defender for Endpoint actions across assessments, machine response, machines and alerts, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Microsoft Defender for Endpoint.
What do I need to connect Microsoft Defender for Endpoint?
Entra application (client) id and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "microsoft_defender_endpoint" } lists exactly what to paste.
Can an AI agent delete or change things in Microsoft Defender for Endpoint?
Only if its key allows it, and only with an explicit confirmation. 6 Microsoft Defender for Endpoint actions are destructive, including cancel a pending machine action, delete an indicator and offboard a machine. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my Microsoft Defender for Endpoint API limit?
actionlake paces every call to the limits in the Microsoft Defender for Endpoint service file: 100 calls a minute and 1,500 an hour per connection. Repeated reads are answered from cache (84 Microsoft Defender for Endpoint actions can be), which never reaches Microsoft Defender for Endpoint.
What does a Microsoft Defender for Endpoint action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (110 Microsoft Defender for Endpoint actions page). Cache hits, searches, dry runs and calls Microsoft Defender for Endpoint refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which Microsoft Defender for Endpoint API does it cover?
The Defender for Endpoint API v1.0 (api.security.microsoft.com/api) at api.security.microsoft.com/api. It is built from Microsoft Defender for Endpoint's documentation as read on 22 October 2026. 110 actions in 52 areas, each one in the signed service file (version 1.0.0).
Does actionlake keep my Microsoft Defender for Endpoint data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Microsoft Defender for Endpoint credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent Microsoft Defender for Endpoint today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.
