{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.Servosity/cipp-mcp","description":"MSP MCP for CIPP: Microsoft 365, Entra ID, Intune, Exchange, Defender and GDAP across all tenants","title":"CIPP MCP - Microsoft 365, Entra ID, Intune, Exchange, Defender, GDAP","repository":{"url":"https://github.com/servosity/msp-skills","source":"github","subfolder":"skills/cipp"},"version":"0.1.13","icons":[{"src":"https://raw.githubusercontent.com/servosity/msp-skills/main/docs/assets/social/cipp/cipp-512x512.png","mimeType":"image/png","sizes":["512x512"]}],"packages":[{"registryType":"mcpb","identifier":"https://github.com/Servosity/msp-skills/releases/download/cipp-v0.1.13/cipp-mcp.mcpb","version":"0.1.13","fileSha256":"3907e2184331ebb2161a795c8098d4cf586553e8dd74b1365c09350d0f3eed4a","transport":{"type":"stdio"},"environmentVariables":[{"description":"Set the CIPP_API_KEY credential for the CIPP MCP server.","isRequired":true,"isSecret":true,"name":"CIPP_API_KEY"},{"description":"Base URL of your self-hosted CIPP instance's API, e.g. https://cipp.example.com/api. The shipped default points at an example host, so until you set this the CLI is not talking to your tenant at all.","isRequired":true,"name":"CIPP_BASE_URL"},{"description":"Set to 1 to keep credentials off disk: auth login and auth set-token refuse and nothing is written, so supply the bearer token in CIPP_API_KEY. Leave blank for the default, which keeps the minted token in the credentials file.","name":"CIPP_NO_CONFIG_WRITE"},{"description":"Overrides the User-Agent the CLI sends on CIPP requests. Leave blank to use the CLI's own built-in User-Agent.","name":"CIPP_USER_AGENT"},{"description":"Optional. Set to exactly 1 to drop every MCP tool not marked read-only, cipp_execute included. Leave blank to allow writes, which run only after a preview the agent confirms.","name":"CIPP_MCP_READ_ONLY"},{"description":"Optional. Set to exactly 1 to keep no local copy of CIPP data: reads go to the API, the response cache is off, and fanout --save and --resume refuse to run. Leave blank to keep the local store.","name":"CIPP_NO_LOCAL_DATA"},{"description":"Required only when running the MCP server with --transport http (a remote/hosted deployment); callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport Claude Desktop uses.","isSecret":true,"name":"CIPP_MCP_HTTP_TOKEN"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-27T14:56:43.562558Z","publishedAt":"2026-10-27T14:56:43.562558Z","updatedAt":"2026-10-27T14:56:43.562558Z","isLatest":true}}}