Browse
→ Infrastructure
→ MSPbots SentinelOne MCP
MSPbots SentinelOne MCP
Read-only HTTP MCP adapter for a scoped SentinelOne Singularity console, built on the purple-mcp tool library. Supports Purple AI hunting, data-lake queries, alerts and asset inventory; console licensing and service-user permissions determine available results. Repository created October 19, 2026.
MCP unverified
Integration
| Transport | http |
| Auth | api-key |
| Endpoint | http://localhost:8080/mcp |
| Install | Self-host per README and supply a scoped console URL and service-user API token through private request headers |
Use Cases
| 01 | Investigate an alert |
| 02 | Query scoped asset inventory |
| 03 | Review a data-lake finding |
Tags
sentinelone security threat-hunting read-only
Machine-readable: /api/servers.json
· JSON-LD schema embedded in <head>