diff --git a/KQL/tenant-mcp-server-connectivity-risk-assessment.kql b/KQL/tenant-mcp-server-connectivity-risk-assessment.kql
new file mode 100644
index 0000000..f4ab5d6
--- /dev/null
+++ b/KQL/tenant-mcp-server-connectivity-risk-assessment.kql
@@ -0,0 +1,9 @@
+AgentsInfo 
+| where Platform == @"LocalAgents"
+| where PublishedStatus == @"Published"
+| where isnotempty(McpServers)
+| summarize arg_max(Timestamp, *) by AgentId
+| mv-expand McpServers
+| extend McpSrv = tolower(tostring(parse_json(McpServers).endpoint))
+| summarize Count=count() by McpSrv
+| sort by Count desc 
\ No newline at end of file