{"id":49838181,"url":"https://github.com/wyre-technology/cipp-mcp","last_synced_at":"2026-05-14T02:01:48.606Z","repository":{"id":352776933,"uuid":"1208619579","full_name":"wyre-technology/cipp-mcp","owner":"wyre-technology","description":"MCP server for CIPP (CyberDrain Improved Partner Portal) — M365 multi-tenant management, users, security, and standards for MSPs","archived":false,"fork":false,"pushed_at":"2026-05-13T20:04:41.000Z","size":165,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-13T21:29:51.342Z","etag":null,"topics":["cipp","m365","mcp","mcp-server","msp","msp-mcp","wyre-technology"],"latest_commit_sha":null,"homepage":null,"language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/wyre-technology.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-04-12T14:31:07.000Z","updated_at":"2026-05-13T20:04:45.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/wyre-technology/cipp-mcp","commit_stats":null,"previous_names":["wyre-technology/cipp-mcp"],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/wyre-technology/cipp-mcp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wyre-technology%2Fcipp-mcp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wyre-technology%2Fcipp-mcp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wyre-technology%2Fcipp-mcp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wyre-technology%2Fcipp-mcp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/wyre-technology","download_url":"https://codeload.github.com/wyre-technology/cipp-mcp/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/wyre-technology%2Fcipp-mcp/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33007321,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-13T13:14:54.681Z","status":"online","status_checked_at":"2026-05-14T02:00:06.663Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cipp","m365","mcp","mcp-server","msp","msp-mcp","wyre-technology"],"created_at":"2026-05-14T02:01:36.022Z","updated_at":"2026-05-14T02:01:48.602Z","avatar_url":"https://github.com/wyre-technology.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# CIPP MCP Server\n\nMCP (Model Context Protocol) server for [CIPP](https://github.com/KelvinTegelaar/CIPP) — the CyberDrain Improved Partner Portal. Provides AI assistants with structured access to CIPP's M365 multi-tenant management capabilities.\n\n## Features\n\n- **37 tools** across 11 categories\n- Tenant, user, group, and mailbox management\n- Security: Conditional Access policies, named locations\n- Standards \u0026 compliance: BPA, domain health, drift detection\n- License reporting (per-tenant and CSP-wide)\n- Alerts, audit logs, and scheduled tasks\n- GDAP role and invite management\n- Stdio and HTTP transport modes\n- MCP Gateway compatible\n\n## Prerequisites\n\n- Node.js 18+\n- A running CIPP deployment\n- CIPP API Key (generated from CIPP Settings → API Client Management)\n\n## Installation\n\n### Via npm (once published)\n\n```sh\nnpx cipp-mcp\n```\n\n### From source\n\n```sh\ngit clone https://github.com/wyre-technology/cipp-mcp\ncd cipp-mcp\nnpm install\nnpm run build\n```\n\n## Configuration\n\nSet these environment variables (or copy `.env.example` to `.env`):\n\n| Variable | Required | Description |\n|---|---|---|\n| `CIPP_BASE_URL` | Yes | Your CIPP deployment URL (e.g. `https://cipp.yourdomain.com`) |\n| `CIPP_API_KEY` | One of | Static Bearer token. Use this **or** the OAuth trio below. |\n| `CIPP_TENANT_ID` | One of | Entra tenant ID that owns the CIPP API-client app registration. |\n| `CIPP_CLIENT_ID` | One of | OAuth client ID issued by CIPP's API Client Management page. |\n| `CIPP_CLIENT_SECRET` | One of | OAuth client secret paired with `CIPP_CLIENT_ID`. |\n| `CIPP_TOKEN_SCOPE` | No | Override OAuth scope (default: `\u003cclientId\u003e/.default`). |\n| `CIPP_TOKEN_URL` | No | Override OAuth token endpoint (sovereign clouds only). |\n| `MCP_TRANSPORT` | No | `stdio` (default) or `http` |\n| `MCP_HTTP_PORT` | No | Port for HTTP mode (default: 8080) |\n| `LOG_LEVEL` | No | `error`, `warn`, `info` (default), or `debug` |\n\n## Usage with Claude Desktop\n\nAdd to your `claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"cipp\": {\n      \"command\": \"node\",\n      \"args\": [\"/path/to/cipp-mcp/dist/entry.js\"],\n      \"env\": {\n        \"CIPP_BASE_URL\": \"https://cipp.yourdomain.com\",\n        \"CIPP_API_KEY\": \"your-api-key\"\n      }\n    }\n  }\n}\n```\n\n## Tools\n\n| Category | Tools |\n|---|---|\n| Tenants | list_tenants, get_tenant_details |\n| Users | list_users, create_user, edit_user, disable_user, reset_password, reset_mfa, revoke_sessions, offboard_user, bec_check, list_mfa_users, list_user_devices, list_user_groups |\n| Groups | list_groups, create_group |\n| Mailboxes | list_mailboxes, list_mailbox_permissions, set_out_of_office, set_email_forwarding |\n| Security | list_conditional_access_policies, list_named_locations |\n| Standards | list_standards, run_standards_check, list_bpa, list_domain_health |\n| Licenses | list_licenses, list_csp_licenses |\n| Alerts | list_audit_logs, list_alert_queue |\n| GDAP | list_gdap_roles, list_gdap_invites |\n| Scheduler | list_scheduled_items, add_scheduled_item |\n| Core | ping, get_version, list_logs |\n\n## Authentication Setup\n\nCIPP's API Client Management page provisions an Entra ID app registration and\nreturns an OAuth **client ID + client secret** (not a long-lived Bearer token).\nThe server exchanges these for a short-lived access token on each request using\nthe OAuth 2.0 client-credentials flow, and caches the token until just before\nits expiry.\n\n1. In CIPP, go to **Settings → CIPP Settings → Integrations → CIPP-API**\n2. Create a new API client\n3. Copy the **Client ID** and **Client Secret** — you will not be able to\n   retrieve the secret later\n4. Configure the server:\n   ```env\n   CIPP_BASE_URL=https://cipp.yourdomain.com\n   CIPP_TENANT_ID=\u003cyour-entra-tenant-id\u003e\n   CIPP_CLIENT_ID=\u003cclient-id-from-cipp\u003e\n   CIPP_CLIENT_SECRET=\u003cclient-secret-from-cipp\u003e\n   ```\n\nIf you already have a static Bearer token (older CIPP deployments), set\n`CIPP_API_KEY` instead and leave the OAuth variables unset. When both are\nprovided, `CIPP_API_KEY` wins.\n\n## License\n\nApache-2.0 — see [LICENSE](LICENSE)\n\n## Contributing\n\nIssues and PRs welcome. This server is tracked against [wyre-technology/msp-claude-plugins#24](https://github.com/wyre-technology/msp-claude-plugins/issues/24).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwyre-technology%2Fcipp-mcp","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwyre-technology%2Fcipp-mcp","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwyre-technology%2Fcipp-mcp/lists"}