Real-time protection for Microsoft Agent 365 tooling servers

Real-time protection for Microsoft Agent 365 tooling servers: Microsoft Defender evaluates tool invocations and responses against security policies and can allow or block interactions with Work IQ MCP and customer MCP tools onboarded to Agent 365. For more information, see Protect AI agents in real time using Microsoft Defender.

Affected: Microsoft Defender XDR

Related changes

• Local AI agent runtime protection on Windows endpoints · Protection
• Custom detection rules in Microsoft Defender now support Near Real-Time (NRT)… · Real
• AI agent posture risk in Microsoft Defender · Agent
• Threat detection for Microsoft Agent 365 agents · Agent
• The Phishing Triage Agent and Security Alert Triage Agent now use the more… · Agent
• Local AI agent discovery on Windows endpoints · Agent

Change history

View at Microsoft → Copy summary