--- title: "Microsoft Graph Security MCP server - actionlake" description: "Give Claude 328 Microsoft Graph Security (Defender XDR) actions through one MCP server. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/microsoft-graph-security-defender-xdr updated: 2026-10-23 --- Connectors · Identity & security # Microsoft Graph Security (Defender XDR) MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to Microsoft Graph Security (Defender XDR) and the rest of your systems. It gives your agent 328 Microsoft Graph Security (Defender XDR) actions (236 reads, 68 writes and 24 that wait for a confirmation) and holds the Microsoft Graph Security (Defender XDR) credential itself, so the agent never does. It paces Microsoft Graph Security (Defender XDR)'s limits and records every call. [Connect Microsoft Graph Security (Defender XDR) free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "m365_graph_security.alerts_v2_list", intent: "check which Microsoft Graph Security (Defender XDR) account is connected" } # List alerts v2 · read · 1 upstream call ``` - 328 actions in one signed file - 236 read look, never change - 68 write create and update - 24 wait for a yes destructive, confirmed first Set up ## Connect Microsoft Graph Security (Defender XDR) in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect Microsoft Graph Security (Defender XDR). OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. actionlake stores what you paste write-only, sealed under your tenant's key. - `client_id` Entra application (client) id - `client_secret` Entra client secret - `tenant_id` Your Microsoft Graph Security (Defender XDR) tenant id ``` account { op: "connections.requirements", service: "m365_graph_security" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "m365_graph_security.alerts_v2_list" } # list alerts v2 · read · 1 upstream call check { action: "m365_graph_security.incidents_update", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` Microsoft Graph Security (Defender XDR) at a glance **Sign-in** OAuth 2.0, client credentials. Paste the app's client id and secret; actionlake fetches and renews the token, and nobody has to sign in. **You provide** `client_id` `client_secret` **Setup fields** `tenant_id` **Limits we pace to** 10,000 calls per 10 minutes, per connection **API covered** Microsoft Graph Security (Defender XDR) API v1.0`graph.microsoft.com/v1.0` **Built from** Microsoft Graph Security (Defender XDR)'s documentation, read 23 October 2026[learn.microsoft.com](https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 236 of 236 reads, for up to an hour; a write clears what it affects **Shared entities** 2, so ask can line Microsoft Graph Security (Defender XDR) up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in Microsoft Graph Security (Defender XDR). 328 actions in 13 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **236** read look, never change - **68** write create and update - **24** destructive wait for a confirmation 1. ### Ediscovery 91 42 read · 38 write · 11 destructive Create ediscovery cases case members · List ediscovery cases case members · Create ediscovery cases · Create ediscovery cases custodians 2. ### Threat intelligence 86 86 read · 0 write · 0 destructive List threat intelligence vulnerabilities · Get threat intelligence vulnerabilities · List threat intelligence article indicators · List threat intelligence articles indicators 3. ### Records 47 28 read · 10 write · 9 destructive Create labels authorities · List labels authorities · Create labels categories · List labels categories 4. ### Attack simulation 30 27 read · 2 write · 1 destructive List attack simulation simulations · Create attack simulation simulations · Get attack simulation simulations · Delete attack simulation simulations 5. ### Identity 22 14 read · 6 write · 2 destructive List identities health issues · List identities identity accounts · List identities sensor candidates · List identities sensors health issues 6. ### Data governance 12 11 read · 1 write · 0 destructive Data security and governance process content async · Data security and governance protection scopes compute · Data security and governance sensitivity labels compute rights and inheritance · List data security and governance sensitivity labels 7. ### Privacy 12 9 read · 3 write · 0 destructive List subject rights requests approvers · List subject rights requests collaborators · Create subject rights requests · List subject rights requests 8. ### Alerts 8 4 read · 4 write · 0 destructive List alerts v2 · Get alerts v2 · Update alerts v2 · Create alerts v2 comments **5 more areas · 20 actions** - Incidents **6** - Audit **5** - Secure score **5** - Email **3** - Hunting **1** Top actions ## The Microsoft Graph Security (Defender XDR) API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. 17 of Microsoft Graph Security (Defender XDR)'s 18 action names are shared with at least one other connector, so an agent learns them once. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `m365_graph_security.alerts_v2_list` List alerts v2 | Get a list of alert resources created to track suspicious activities in an organization. This operation lets you filter and sort through alerts to create an… | read | `security.alert.list` 22 connectors | | `m365_graph_security.incidents_list` List incidents | Get a list of incident objects that Microsoft 365 Defender created to track attacks in an organization. Attacks are typically inflicted on different types of… | read | `security.incident.list` 17 connectors | | `m365_graph_security.alerts_v2_get` Get alerts v2 | Get the properties and relationships of an alert object. | read | `security.alert.get` 21 connectors | | `m365_graph_security.incidents_get` Get incidents | Retrieve the properties and relationships of an incident object. Attacks are typically inflicted on different types of entities, such as devices, users, and… | read | `security.incident.get` 17 connectors | | `m365_graph_security.incidents_update` Update incidents | Update the properties of an incident object. | write | `security.incident.update` 13 connectors | | `m365_graph_security.audit_log_queries_records_list` List audit log queries records | The collection of audit log records retrieved by the query. | read | `security.audit_log.list` 69 connectors | | `m365_graph_security.threat_intelligence_vulnerabilities_list` List threat intelligence vulnerabilities | Read the properties and relationships of a vulnerability object. | read | `security.vulnerability.list` 14 connectors | | `m365_graph_security.secure_score_control_profiles_list` List secure score control profiles | Retrieve the properties and relationships of a secureScoreControlProfiles object. | read | `security.control.list` 6 connectors | | `m365_graph_security.audit_log_queries_records_get` Get audit log queries records | The collection of audit log records retrieved by the query. | read | `security.audit_log.get` 11 connectors | | `m365_graph_security.attack_simulation_simulations_create` Create attack simulation simulations | Create an attack simulation campaign for a tenant. | write | `security.phishing_simulation.create` 2 connectors | | `m365_graph_security.secure_score_control_profiles_update` Update secure score control profiles | Update an editable secureScoreControlProfile object within any integrated solution to change various properties, such as tenantNote. | write | `security.control.update` 5 connectors | | `m365_graph_security.attack_simulation_simulations_delete` Delete attack simulation simulations | Delete an attack simulation campaign for a tenant. | destructive | `security.phishing_simulation.delete` 2 connectors | Try it ## Prompts to paste into Claude. Each one names the Microsoft Graph Security (Defender XDR) actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Which Microsoft Graph Security (Defender XDR) incidents are open, and how long has each been open? calls `m365_graph_security.incidents_list` 2. Write write Update incidents in Microsoft Graph Security (Defender XDR). Show me exactly what you will send before you save it. calls `m365_graph_security.incidents_update` Governance for Microsoft Graph Security (Defender XDR) ## Destructive actions wait for a yes. 24 Microsoft Graph Security (Defender XDR) actions are destructive. These are all of them: - Delete attack simulation simulations `m365_graph_security.attack_simulation_simulations_delete` - Delete ediscovery cases `m365_graph_security.ediscovery_cases_delete` - Delete labels citations `m365_graph_security.labels_citations_delete` - Delete labels categories `m365_graph_security.labels_categories_delete` - Delete identities sensors `m365_graph_security.identities_sensors_delete` - Delete labels authorities `m365_graph_security.labels_authorities_delete` - Delete labels departments `m365_graph_security.labels_departments_delete` - Delete ediscovery cases tags `m365_graph_security.ediscovery_cases_tags_delete` - Delete labels retention labels `m365_graph_security.labels_retention_labels_delete` - Delete ediscovery cases searches `m365_graph_security.ediscovery_cases_searches_delete` - Delete triggers retention events `m365_graph_security.triggers_retention_events_delete` - Delete labels file plan references `m365_graph_security.labels_file_plan_references_delete` - Ediscovery cases custodians release `m365_graph_security.ediscovery_cases_custodians_release` - Delete ediscovery cases case members `m365_graph_security.ediscovery_cases_case_members_delete` - Ediscovery cases searches purge data `m365_graph_security.ediscovery_cases_searches_purge_data` - Delete labels categories subcategories `m365_graph_security.labels_categories_subcategories_delete` - Collaboration analyzed emails remediate `m365_graph_security.collaboration_analyzed_emails_remediate` - Identities identity accounts invoke action `m365_graph_security.identities_identity_accounts_invoke_action` - Delete trigger types retention event types `m365_graph_security.trigger_types_retention_event_types_delete` - Delete ediscovery cases review sets queries `m365_graph_security.ediscovery_cases_review_sets_queries_delete` - Delete ediscovery cases custodians site sources `m365_graph_security.ediscovery_cases_custodians_site_sources_delete` - Delete ediscovery cases custodians user sources `m365_graph_security.ediscovery_cases_custodians_user_sources_delete` - Ediscovery cases noncustodial data sources release `m365_graph_security.ediscovery_cases_noncustodial_data_sources_release` - Delete ediscovery cases custodians unified group sources `m365_graph_security.ediscovery_cases_custodians_unified_group_sources_delete` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do m365_graph_security.attack_simulation_simulations_delete confirm_policy: **human** Delete attack simulation simulations? **intent:** the user asked me to delete attack simulation simulations run suspended · waiting for a named person · key _m365-graph-security-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "m365-graph-security-agent", allowed_actions: ["m365_graph_security.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "m365_graph_security.attack_simulation_simulations_delete", approver: "lead@example.com" }, { match: "m365_graph_security.ediscovery_cases_delete", approver: "lead@example.com" }, { match: "m365_graph_security.labels_citations_delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to Microsoft Graph Security (Defender XDR) only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What Microsoft Graph Security (Defender XDR) costs on actionlake. Every Microsoft Graph Security (Defender XDR) action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call Microsoft Graph Security (Defender XDR) refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 328 Microsoft Graph Security (Defender XDR) actions - 93 actions page each page of a long list is one call - 236 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every Microsoft Graph Security (Defender XDR) action. 328 actions by area: the id your agent calls, what it does, and its effect. **Ediscovery 91** - `m365_graph_security.ediscovery_cases_case_members_create` Create ediscovery cases case members write - `m365_graph_security.ediscovery_cases_case_members_list` List ediscovery cases case members read - `m365_graph_security.ediscovery_cases_create` Create ediscovery cases write - `m365_graph_security.ediscovery_cases_custodians_create` Create ediscovery cases custodians write - `m365_graph_security.ediscovery_cases_case_members_delete` Delete ediscovery cases case members destructive - `m365_graph_security.ediscovery_cases_case_members_get` Get ediscovery cases case members read - and 85 more in this area **Threat intelligence 86** - `m365_graph_security.threat_intelligence_article_indicators_list` List threat intelligence article indicators read - `m365_graph_security.threat_intelligence_articles_indicators_list` List threat intelligence articles indicators read - `m365_graph_security.threat_intelligence_vulnerabilities_get` Get threat intelligence vulnerabilities read - `m365_graph_security.threat_intelligence_vulnerabilities_list` List threat intelligence vulnerabilities read - `m365_graph_security.threat_intelligence_article_indicators_artifact_get` Get threat intelligence article indicators artifact read - `m365_graph_security.threat_intelligence_article_indicators_get` Get threat intelligence article indicators read - and 80 more in this area **Records 47** - `m365_graph_security.labels_authorities_create` Create labels authorities write - `m365_graph_security.labels_authorities_list` List labels authorities read - `m365_graph_security.labels_categories_create` Create labels categories write - `m365_graph_security.labels_categories_list` List labels categories read - `m365_graph_security.labels_authorities_delete` Delete labels authorities destructive - `m365_graph_security.labels_authorities_get` Get labels authorities read - and 41 more in this area **Attack simulation 30** - `m365_graph_security.attack_simulation_simulations_create` Create attack simulation simulations write - `m365_graph_security.attack_simulation_simulations_delete` Delete attack simulation simulations destructive - `m365_graph_security.attack_simulation_simulations_get` Get attack simulation simulations read - `m365_graph_security.attack_simulation_simulations_list` List attack simulation simulations read - `m365_graph_security.attack_simulation_end_user_notifications_details_get` Get attack simulation end user notifications details read - `m365_graph_security.attack_simulation_end_user_notifications_details_list` List attack simulation end user notifications details read - and 24 more in this area **Identity 22** - `m365_graph_security.identities_health_issues_list` List identities health issues read - `m365_graph_security.identities_identity_accounts_list` List identities identity accounts read - `m365_graph_security.identities_sensor_candidates_list` List identities sensor candidates read - `m365_graph_security.identities_sensors_health_issues_list` List identities sensors health issues read - `m365_graph_security.identities_health_issues_get` Get identities health issues read - `m365_graph_security.identities_health_issues_update` Update identities health issues write - and 16 more in this area **Data governance 12** - `m365_graph_security.data_security_and_governance_process_content_async` Data security and governance process content async write - `m365_graph_security.data_security_and_governance_protection_scopes_compute` Data security and governance protection scopes compute read - `m365_graph_security.data_security_and_governance_sensitivity_labels_compute_rights_and_inheritance` Data security and governance sensitivity labels compute rights and inheritance read - `m365_graph_security.data_security_and_governance_sensitivity_labels_list` List data security and governance sensitivity labels read - `m365_graph_security.data_security_and_governance_sensitivity_labels_compute_inheritance` Data security and governance sensitivity labels compute inheritance read - `m365_graph_security.data_security_and_governance_sensitivity_labels_get` Get data security and governance sensitivity labels read - and 6 more in this area **Privacy 12** - `m365_graph_security.subject_rights_requests_approvers_list` List subject rights requests approvers read - `m365_graph_security.subject_rights_requests_collaborators_list` List subject rights requests collaborators read - `m365_graph_security.subject_rights_requests_create` Create subject rights requests write - `m365_graph_security.subject_rights_requests_list` List subject rights requests read - `m365_graph_security.subject_rights_requests_approvers_get` Get subject rights requests approvers read - `m365_graph_security.subject_rights_requests_collaborators_get` Get subject rights requests collaborators read - and 6 more in this area **Alerts 8** - `m365_graph_security.alerts_v2_comments_create` Create alerts v2 comments write - `m365_graph_security.alerts_v2_get` Get alerts v2 read - `m365_graph_security.alerts_v2_list` List alerts v2 read - `m365_graph_security.alerts_v2_update` Update alerts v2 write - `m365_graph_security.alerts_get` Get alerts read - `m365_graph_security.alerts_list` List alerts read - and 2 more in this area **Incidents 6** - `m365_graph_security.incidents_alerts_list` List incidents alerts read - `m365_graph_security.incidents_get` Get incidents read - `m365_graph_security.incidents_list` List incidents read - `m365_graph_security.incidents_update` Update incidents write - `m365_graph_security.incidents_alerts_get` Get incidents alerts read - `m365_graph_security.incidents_merge_incidents` Incidents merge incidents write **Audit 5** - `m365_graph_security.audit_log_queries_create` Create audit log queries write - `m365_graph_security.audit_log_queries_list` List audit log queries read - `m365_graph_security.audit_log_queries_records_get` Get audit log queries records read - `m365_graph_security.audit_log_queries_records_list` List audit log queries records read - `m365_graph_security.audit_log_queries_get` Get audit log queries read **Secure score 5** - `m365_graph_security.secure_score_control_profiles_get` Get secure score control profiles read - `m365_graph_security.secure_score_control_profiles_list` List secure score control profiles read - `m365_graph_security.secure_score_control_profiles_update` Update secure score control profiles write - `m365_graph_security.secure_scores_list` List secure scores read - `m365_graph_security.secure_scores_get` Get secure scores read **Email 3** - `m365_graph_security.collaboration_analyzed_emails_get` Get collaboration analyzed emails read - `m365_graph_security.collaboration_analyzed_emails_list` List collaboration analyzed emails read - `m365_graph_security.collaboration_analyzed_emails_remediate` Collaboration analyzed emails remediate destructive **Hunting 1** - `m365_graph_security.run_hunting_query` Run hunting query read This index shows a sample of each area. All 328 actions, with their inputs and prices, are in the [catalogue](https://actionlake.com/console/catalogue), which a free sandbox key can search. Questions ## The Microsoft Graph Security (Defender XDR) MCP server, answered. **Is there a Microsoft Graph Security (Defender XDR) MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 328 Microsoft Graph Security (Defender XDR) actions across ediscovery, threat intelligence, records and attack simulation, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by Microsoft Graph Security (Defender XDR). **What do I need to connect Microsoft Graph Security (Defender XDR)?** Entra application (client) id and Entra client secret. Plus your tenant id. The free call account { op: "connections.requirements", service: "m365_graph_security" } lists exactly what to paste. **Can an AI agent delete or change things in Microsoft Graph Security (Defender XDR)?** Only if its key allows it, and only with an explicit confirmation. 24 Microsoft Graph Security (Defender XDR) actions are destructive, including delete attack simulation simulations, delete ediscovery cases and delete labels citations. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my Microsoft Graph Security (Defender XDR) API limit?** actionlake paces every call to the limits in the Microsoft Graph Security (Defender XDR) service file: 10,000 calls per 10 minutes per connection. Repeated reads are answered from cache (236 Microsoft Graph Security (Defender XDR) actions can be), which never reaches Microsoft Graph Security (Defender XDR). **What does a Microsoft Graph Security (Defender XDR) action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (93 Microsoft Graph Security (Defender XDR) actions page). Cache hits, searches, dry runs and calls Microsoft Graph Security (Defender XDR) refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which Microsoft Graph Security (Defender XDR) API does it cover?** The Microsoft Graph Security (Defender XDR) API v1.0 at graph.microsoft.com/v1.0. It is built from Microsoft Graph Security (Defender XDR)'s documentation as read on 23 October 2026. 328 actions in 13 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my Microsoft Graph Security (Defender XDR) data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your Microsoft Graph Security (Defender XDR) credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like Microsoft Graph Security (Defender XDR) Shares the most action names with - [Trend Vision One 9](https://actionlake.com/connectors/trend-vision-one) - [StrangeBee TheHive 8](https://actionlake.com/connectors/strangebee-thehive) - [Expel Workbench 6](https://actionlake.com/connectors/expel-workbench) - [Palo Alto Networks Cortex XDR 6](https://actionlake.com/connectors/palo-alto-networks-cortex-xdr) - [Vanta 6](https://actionlake.com/connectors/vanta) - [Microsoft Defender for Endpoint 5](https://actionlake.com/connectors/microsoft-defender-for-endpoint) Joins with, on shared entities - [Dynatrace 2](https://actionlake.com/connectors/dynatrace) - [Rootly 2](https://actionlake.com/connectors/rootly) - [FireHydrant 2](https://actionlake.com/connectors/firehydrant) - [PagerDuty 2](https://actionlake.com/connectors/pagerduty) - [incident.io 2](https://actionlake.com/connectors/incident-io) - [Acronis Cyber Protect Cloud 2](https://actionlake.com/connectors/acronis-cyber-protect-cloud) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by Microsoft Graph Security (Defender XDR); the name is the vendor's own. Counts are from the Microsoft Graph Security (Defender XDR) service file, version 1.0.0. ## Give your agent Microsoft Graph Security (Defender XDR) today. [Connect Microsoft Graph Security (Defender XDR) free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/microsoft-graph-security-defender-xdr More: https://actionlake.com/llms.txt