Connect CIPP to Microsoft Copilot Studio as a declarative agent over the CyberDrain MCP endpoint, so engineers can work agentically against tenant data through CIPP.

This is a proof of concept. The companion master prompt and skills are only minimally trained, cover a small skillset, and need further training before you treat them as production-ready. Official CIPP API and MCP setup lives in the CIPP API documentation; this post covers Copilot Studio declarative-agent wiring on top of that.

This project provides two versions of a PowerShell script to ship logs from Cisco Umbrella Portal to Huntress using the HEC (HTTP Event Collector) format.