Netwrix Access Analyzer MCP Server

An MCP server for Netwrix Access Analyzer, designed to integrate with Claude Desktop. Currently supports Active Directory and File System solutions.

Features

- SQL Server integration with automatic connection on startup
- Dynamic database schema exploration
- SQL query execution
- Netwrix Access Analyzer File System tools

Dependencies

This MCP server requires the following dependencies:

- Python 3.12 or higher
- MCP SDK
- pyodbc 4.0.39 or higher (for SQL Server connectivity)
- python-dotenv 1.0.0 or higher (for environment variable management)
- ODBC Driver 17 for SQL Server or later (must be installed on your system)

Netwrix Access Analyzer (NAA) Dependencies

This MCP Server requires Netwrix Access Analyzer (NAA) File System or Active Directory scans to be completed.

Available Tools

| Solution | Tool Name | Description |
|------------------|---------------------------------|-------------|
| Active Directory | Get-ADEffectiveMembership | Discovers effective group membership in AD with filters. |
| Active Directory | Get-ADExceptions | Retrieves AD exceptions with optional filters. |
| Active Directory | Get-ADPermissions | Retrieves AD permissions from the permissions view with filters. |
| Active Directory | Get-DomainControllers | Lists domain controllers. |
| Active Directory | Get-CertificateVulnerabilities | Lists certificate vulnerabilities. |
| Active Directory | Get-ADCARights | Lists AD CA rights. |
| Active Directory | Get-ADSecurityAssessment | Retrieves AD security assessment results. |
| Active Directory | Get-ADUsers | Retrieves AD user details with filters. |
| Active Directory | Get-ADGroups | Retrieves AD group details with filters. |
| Active Directory | Get-ADComputers | Retrieves AD computer details with filters. |
| Database | Connect-Database | Connects to a specified MSSQL database. |
| Database | Show-ConnectionStatus | Shows the current DB connection status. |
| Database | Show-TableSchema | Shows the schema for a given table. |
| File System | Discover-SensitiveData | Discovers where sensitive data exists (DLP matches). |
| File System | Get-OpenShares | Finds open shares accessible to broad groups. |
| File System | Get-TrusteeAccess | Finds resources where a trustee has access. |
| File System | Get-TrusteePermissionSource | Finds the source of access for a trustee/resource. |
| File System | Get-ResourceAccess | Gets effective access for a resource path. |
| File System | Get-UnusedAccess | Finds users with unused access to a share. |
| File System | Get-RunningJobs | Lists running Netwrix Access Auditor jobs. |
| File System | Get-ShadowAccess | Retrieves details about shadow access. |

Installation Instructions (Claude Desktop)

1. Install Claude Desktop
- Download and install Claude Desktop from the official website: https://claude.ai/download
- Follow the installation prompts for your operating system (macOS, Windows, or Linux).

2. Clone this repository

   git clone https://github.com/netwrix/mcp-server-naa.git

   cd mcp-server-naa

   

3. Connect Claude Desktop to this Server
- Add the following uv configuration to your Claude Desktop MCP Configuration:

    "NAA_AD": {

      "command": "/path/to/uv",

      "args": [

        "run",

        "--with",

        "pyodbc",

        "fastmcp",

        "run",

        "/path/to/mcp-server-naa/run.py"

      ],

      "env": {

        "DB_SERVER": "HOST OR IP",

        "DB_NAME": "DATABASENAME",

        "DB_USER": "USERNAME",

        "DB_PASSWORD": "PASSWORD",

        "DB_USE_WINDOWS_AUTH": "FALSE|TRUE"

      }

    }

    

---