{
  "type": "mcp-server",
  "slug": "sentinelone-purple-ai-mcp-server",
  "name": "Purple AI MCP Server",
  "author": "Sentinel-One",
  "description": "Read-only MCP server for SentinelOne's Singularity Platform — query Purple AI, alerts, vulnerabilities, misconfigurations, and asset inventory via natural language or PowerQuery.",
  "github_url": "https://github.com/Sentinel-One/purple-mcp",
  "license": "MIT",
  "tier": "contributed",
  "tags": [
    "sentinelone",
    "purple-ai",
    "alerts",
    "vulnerability-management",
    "asset-inventory",
    "power-query",
    "singularity-platform"
  ],
  "integrations": [
    "SentinelOne"
  ],
  "domains": [
    "security-operations",
    "vulnerability-management"
  ],
  "date_added": "2026-07-09",
  "last_reviewed": "2026-07-30",
  "transport": "both",
  "runtime": "python",
  "auth_method": "none",
  "compatible_clients": [
    "Claude Desktop",
    "Claude Code",
    "Codex",
    "Cursor"
  ],
  "tools_exposed": [
    {
      "name": "purple_ai",
      "description": "Ask security questions and investigate threats using SentinelOne's Purple AI"
    },
    {
      "name": "powerquery",
      "description": "Run PowerQuery analytics against events in your SentinelOne data lake"
    },
    {
      "name": "get_alert",
      "description": "Get details for a specific alert"
    },
    {
      "name": "list_alerts",
      "description": "List recent alerts"
    },
    {
      "name": "search_alerts",
      "description": "Search alerts with filters"
    },
    {
      "name": "get_alert_notes",
      "description": "Get comments/notes on an alert"
    },
    {
      "name": "get_alert_history",
      "description": "View an alert's timeline"
    },
    {
      "name": "get_vulnerability",
      "description": "Get details for a specific vulnerability"
    },
    {
      "name": "list_vulnerabilities",
      "description": "List recent vulnerabilities"
    },
    {
      "name": "search_vulnerabilities",
      "description": "Search CVEs and vulnerability findings with filters"
    },
    {
      "name": "get_vulnerability_notes",
      "description": "Get comments on a vulnerability"
    },
    {
      "name": "get_vulnerability_history",
      "description": "View a vulnerability's timeline"
    },
    {
      "name": "get_misconfiguration",
      "description": "Get details for a specific misconfiguration"
    },
    {
      "name": "list_misconfigurations",
      "description": "List recent misconfiguration issues"
    },
    {
      "name": "search_misconfigurations",
      "description": "Search misconfigurations by criteria"
    },
    {
      "name": "get_misconfiguration_notes",
      "description": "Get comments on a misconfiguration"
    },
    {
      "name": "get_misconfiguration_history",
      "description": "View a misconfiguration's timeline"
    },
    {
      "name": "get_inventory_item",
      "description": "Get details for a specific asset"
    },
    {
      "name": "list_inventory_items",
      "description": "List assets by surface type (endpoints, cloud resources, identities, network devices)"
    },
    {
      "name": "search_inventory_items",
      "description": "Search asset inventory with advanced filters"
    }
  ],
  "resources_exposed": [],
  "prompts_exposed": [],
  "repo": {
    "found": true,
    "archived": false,
    "pushed_at": "2026-10-28T14:20:38Z",
    "stars": 102,
    "forks": 35,
    "open_issues": 0,
    "owner_type": "organization",
    "language": "Python",
    "checked_at": "2026-11-04T22:41:26.159Z"
  },
  "url": "https://exchange.tenable.com/mcp-servers/sentinelone-purple-ai-mcp-server",
  "json_url": "https://exchange.tenable.com/api/mcp-servers/sentinelone-purple-ai-mcp-server.json",
  "source_url": "https://github.com/tenable/cyberagents-exchange/blob/main/mcp-servers/sentinelone-purple-ai-mcp-server.md"
}