Who it is for
Security analysts investigating alerts across cloud, SaaS, identity, endpoint and code signals.
AI Connectors · Data & Analytics
Query security operations data: alerts, investigations and audit logs
Overview
Exaforce is a SOC and MDR platform that correlates signals across cloud, SaaS, identity, endpoint, network and code systems. This connector brings its investigation and search surface into a conversation, which removes the query language that would otherwise sit between a question and an answer.
Searches run across users, endpoints, resources and events. From a finding, related ones can be pivoted to, and runtime activity can be lined up against configuration state, the correlation that usually decides whether an alert matters. It works against an existing Exaforce tenant and ingestion pipeline. The connector is community-listed.
Security analysts investigating alerts across cloud, SaaS, identity, endpoint and code signals.
The endpoint requires credentials before naming anything, so forty-two is the publisher's count. The listing describes searching users, endpoints, resources and events, pivoting through related findings, and correlating runtime activity with configuration state.
Availability
Exaforce is listed in the Claude connectors directory only. Exaforce has no app under the same domain in the ChatGPT directory; 392 of the 3,150 products here are on both marketplaces, and this is not one of them.
The MCP server behind a Claude connector is usually the same server a ChatGPT app would need, so the absence is a distribution decision rather than a technical one.
Claude listing
Exaforce publishes 42 tools to Claude, deeper than 88.4% of the 1,253 Claude-listed connectors.
The median Claude-listed connector filed under Data & Analytics publishes 12, so this one runs 30 tools above its bucket's median and ranks 19th of 198 by tool count.
It falls in the 21-50 tools band, which holds 20% of the Claude directory.
Exaforce publishes a remote MCP endpoint. Claude connects to it over HTTP; there is nothing to install locally.
Every connector in the Claude directory is remote, all 1,253 of them, so transport is not a differentiator there.
https://mcp.api.us.app.exaforce.io/ Exaforce is community-listed in the Claude directory, the tier 770 of 1,253 connectors sit in (61.5%). It is the default for a self-published server, and says nothing either way about quality.
In the publisher's words
Exaforce is an AI-powered SOC and MDR platform that correlates security signals across cloud, SaaS, identity, endpoint, network, and code systems. The MCP connector brings the Exaforce investigation and search experience directly into your Claude conversations. Once connected, ask Claude to query your Exaforce tenant in natural language. Search across users, endpoints, resources, and events; investigate alerts; pivot through related findings; and correlate runtime activity with configuration state — without learning a query language or switching tabs. Works with your existing Exaforce ingestion pipeline. Out-of-the-box coverage includes AWS, Okta, GitHub, Microsoft 365, and Google Workspace, plus the rest of the Exaforce-supported data sources. Authentication uses OAuth 2.1 with PKCE, scoped to your Exaforce tenant. The connector accesses only your tenant's data and never crosses tenant boundaries. See Exaforce's privacy policy for the data-flow disclosure when MCP is enabled.
Quoted from the connector's own Claude directory listing as captured in August 2026. Node8 did not write it and does not vouch for it.
Nearby
ERP data in a Commercient lake: SQL reads, record edits, exports and audit
Claude
Thai accounting data: sales, expenses, invoices and full financials
Claude
Query governed data marts over a company warehouse
Claude · ChatGPT
Network status and device configuration reporting from Trustgrid
Claude
Read-only Brazilian investment fund registry and structure lookups
Claude
Governed SQL querying across warehouses with a BI layer attached
Claude
This is an independent catalogue entry compiled by Node8 from Exaforce's public marketplace listing as it stood in August 2026. Listing facts come from the marketplaces; the comparisons against the rest of the directory and any live-endpoint measurements are Node8's. Node8 is not affiliated with Exaforce, and inclusion here is not an endorsement.
Node8 builds MCP servers end to end: deciding which tools are worth exposing, the authentication and permission model, the review submissions, and the onboarding that gets them used. One server serves ChatGPT, Claude, and Microsoft Copilot.