Exaforce
Claude connectorCommunityThe ExaForce MCP connector lets Claude query your ExaForce security operations data directly. Ask about alerts, investigations, audit logs,…
Exaforce is an AI-powered SOC and MDR platform that correlates security signals across cloud, SaaS, identity, endpoint, network, and code systems. The MCP connector brings the Exaforce investigation and search experience directly into your Claude conversations. Once connected, ask Claude to query your Exaforce tenant in natural language. Search across users, endpoints, resources, and events; investigate alerts; pivot through related findings; and correlate runtime activity with configuration state — without learning a query language or switching tabs. Works with your existing Exaforce ingestion pipeline. Out-of-the-box coverage includes AWS, Okta, GitHub, Microsoft 365, and Google Workspace, plus the rest of the Exaforce-supported data sources. Authentication uses OAuth 2.1 with PKCE, scoped to your Exaforce tenant. The connector accesses only your tenant's data and never crosses tenant boundaries. See Exaforce's privacy policy for the data-flow disclosure when MCP is enabled.
- Tools
- 42
exposed by this connector
Movement
From our daily snapshots over the last 30 days.
Rank by popularity
Rank by trending score
Popularity score
Trending score
In its categories
How this connector compares with others in the same category. Positions are counted within the category, not across the whole directory.
Other72nd of 688 by popularity · 118th of 232 by trending score
| # | Connector | Popularity | Trending | 7d |
|---|---|---|---|---|
| 70 | 10,276 | 8,711 #181 | 79places down | |
| 71 | 10,131 | 18,308 #100 | 52places down | |
| 72 | 10,111 | 16,225 #118 | 54places down | |
| 73 | 10,028 | 4,929 #214 | 36places down | |
| 74 | 10,028 | 791,248 #3 | 76places up |
| # | Connector | Trending | Popularity | 7d |
|---|---|---|---|---|
| 116 | 16,350 | 8,050 #143 | 879places up | |
| 117 | 16,231 | 10,506 #60 | 295places down | |
| 118 | 16,225 | 10,111 #72 | 651places down | |
| 119 | 16,079 | 9,098 #103 | 103places up | |
| 120 | 15,956 | 10,341 #64 | 138places down |
Data analytics414th of 3,282 by popularity · 705th of 1,426 by trending score
| # | Connector | Popularity | Trending | 7d |
|---|---|---|---|---|
| 412 | 10,141 | 39,612 #115 | 14places up | |
| 413 | 10,137 | 14,547 #809 | 45places down | |
| 414 | 10,111 | 16,225 #705 | 54places down | |
| 415 | 10,109 | 31,126 #205 | 93places up | |
| 416 | 10,106 | 12,561 #952 | 47places down |
Tools
- CQLGeneration
- ConfluenceGetPage
- DatabaseLookup
- DefenderXDRAdvancedHuntingQuery
- DefenderXDRGetIncident
- DesignTemplateGetTemplate
- DesignTemplateListTemplates
- ExecuteQuery
- GeoIPLookupTool
- GetAgentInputParameters
- GetAutomationAgentResult
- GoogleWorkspaceListOauthTokens
- GoogleWorkspaceQueryAuditReportsBigquery
- JiraGetIssue
- JiraSearchIssues
- ListAvailableQuestions
- ListQuestionsDetails
- LookUpTableGetData
Show all 42Show fewer
- ManageBusinessContextRuleCreateRule
- ManageBusinessContextRuleDeleteRule
- ManageBusinessContextRuleFindSimilarRules
- ManageBusinessContextRuleGetRule
- ManageBusinessContextRuleListRules
- ManageBusinessContextRuleUpdateRule
- ManageCaseAddNote
- ManageCaseCreateCase
- ManageCaseGetCase
- ManageCaseUpdateCase
- PerplexitySearch
- QueryBuilderRequestBuildQuery
- QueryBuilderRequestBuildQueryV3
- QueryBuilderRequestExecuteQuery
- SchemaDescribe
- SentinelOneInvestigate
- SentinelOneIsolateDevice
- SentinelOneUpdateAlertStatus
- SentinelOneUpdateThreatStatus
- StartAgent
- UrlScanTool
- VirusTotalDomainScan
- VirusTotalFileScan
- VirusTotalUrlScan
- Categories
- Sign-in
- Required
- Connector URL
- https://mcp.api.us.app.exaforce.io/
- Transport
- Streamable HTTP
- Works with
- Claude, Claude API, Claude Code, Claude Desktop
- Acts on
- Logs & errors, Servers & cloud
- Department
- IT & security
- Added
- June 24, 2026
- More info
- Sponsorship
- Promote this connector