$ loading_
Query and analyze Azure logs, telemetry, and security data with KQL.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "KQL MCP Server" yet — see the docs or source repo.
Use KQL to query Azure Log Analytics for error or exception logs in the past 24 hours, count them by service name, and list the top 10 services with the most errors plus sample log entries.
Provides an executable KQL query plus a ranked summary of errors by service and sample log results.
Query Microsoft Sentinel for security alerts from the last 7 days, summarize counts by severity and date, and identify the alert types growing the fastest.
Outputs a Sentinel-ready KQL query and summarizes alert trends, severity distribution, and key alert types.
Analyze the last 3 days of API response-time data in Azure Data Explorer, calculate P50, P95, and P99 latency by endpoint path, and identify the 5 slowest endpoints.
Generates a KQL performance query and returns latency percentiles plus a list of bottleneck endpoints.
Run KQL queries on Azure Data Explorer using Azure CLI authentication.
Generate and run KQL from natural language with schema discovery for Azure Data Explorer.
Query Azure Log Analytics workspaces with KQL to inspect logs and operational data.
Query, explore, and interact with Azure SQL databases via MCP clients.
Investigate Microsoft Defender security events with natural language KQL hunting.
Connect to SQL Server, inspect schemas, run queries, and analyze OEE metrics.