Exaforce
Claude connectorCommunityThe ExaForce MCP connector lets Claude query your ExaForce security operations data directly. Ask about alerts, investigations, audit logs,…
Exaforce is an AI-powered SOC and MDR platform that correlates security signals across cloud, SaaS, identity, endpoint, network, and code systems. The MCP connector brings the Exaforce investigation and search experience directly into your Claude conversations. Once connected, ask Claude to query your Exaforce tenant in natural language. Search across users, endpoints, resources, and events; investigate alerts; pivot through related findings; and correlate runtime activity with configuration state — without learning a query language or switching tabs. Works with your existing Exaforce ingestion pipeline. Out-of-the-box coverage includes AWS, Okta, GitHub, Microsoft 365, and Google Workspace, plus the rest of the Exaforce-supported data sources. Authentication uses OAuth 2.1 with PKCE, scoped to your Exaforce tenant. The connector accesses only your tenant's data and never crosses tenant boundaries. See Exaforce's privacy policy for the data-flow disclosure when MCP is enabled.
- Tools
- 42
exposed by this connector
Movement
From our daily snapshots over the last 30 days.
Rank by popularity
Rank by trending score
Popularity score
Trending score
In its categories
How this connector compares with others in the same category. Positions are counted within the category, not across the whole directory.
Other71st of 582 by popularity · 90th of 208 by trending score
| # | Connector | Popularity | Trending | 7d |
|---|---|---|---|---|
| 69 | 9,963 | 617,566 #5 | — | |
| 70 | 9,937 | 33,528 #38 | 51places down | |
| 71 | 9,926 | 17,562 #90 | 20places up | |
| 72 | 9,884 | — | 103places down | |
| 73 | 9,791 | 6,749 #182 | 59places down |
Data analytics392nd of 2,740 by popularity · 545th of 1,228 by trending score
| # | Connector | Popularity | Trending | 7d |
|---|---|---|---|---|
| 390 | 9,967 | 34,353 #180 | 1places down | |
| 391 | 9,931 | 8,861 #1019 | 98places down | |
| 392 | 9,926 | 17,562 #545 | 20places up | |
| 393 | 9,919 | 52,407 #81 | 18places down | |
| 394 | 9,911 | 7,424 #1086 | 68places down |
| # | Connector | Trending | Popularity | 7d |
|---|---|---|---|---|
| 543 | 17,576 | 5,977 #1251 | 162places up | |
| 544 | 17,569 | 5,459 #1396 | 473places up | |
| 545 | 17,562 | 9,926 #392 | 519places down | |
| 546 | 17,562 | 8,077 #716 | 190places down | |
| 547 | 17,536 | 9,412 #464 | 2places down |
Tools
- CQLGeneration
- ConfluenceGetPage
- DatabaseLookup
- DefenderXDRAdvancedHuntingQuery
- DefenderXDRGetIncident
- DesignTemplateGetTemplate
- DesignTemplateListTemplates
- ExecuteQuery
- GeoIPLookupTool
- GetAgentInputParameters
- GetAutomationAgentResult
- GoogleWorkspaceListOauthTokens
- GoogleWorkspaceQueryAuditReportsBigquery
- JiraGetIssue
- JiraSearchIssues
- ListAvailableQuestions
- ListQuestionsDetails
- LookUpTableGetData
Show all 42Show fewer
- ManageBusinessContextRuleCreateRule
- ManageBusinessContextRuleDeleteRule
- ManageBusinessContextRuleFindSimilarRules
- ManageBusinessContextRuleGetRule
- ManageBusinessContextRuleListRules
- ManageBusinessContextRuleUpdateRule
- ManageCaseAddNote
- ManageCaseCreateCase
- ManageCaseGetCase
- ManageCaseUpdateCase
- PerplexitySearch
- QueryBuilderRequestBuildQuery
- QueryBuilderRequestBuildQueryV3
- QueryBuilderRequestExecuteQuery
- SchemaDescribe
- SentinelOneInvestigate
- SentinelOneIsolateDevice
- SentinelOneUpdateAlertStatus
- SentinelOneUpdateThreatStatus
- StartAgent
- UrlScanTool
- VirusTotalDomainScan
- VirusTotalFileScan
- VirusTotalUrlScan
- Categories
- Sign-in
- Required
- Connector URL
- https://mcp.api.us.app.exaforce.io/
- Transport
- Streamable HTTP
- Works with
- Claude, Claude API, Claude Code, Claude Desktop
- Acts on
- Logs & errors, Servers & cloud
- Department
- IT & security
- Added
- June 24, 2026
- More info
- Sponsorship
- Promote this connector