{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.Servosity/connectsecure-mcp","description":"Vulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spots","title":"ConnectSecure MCP","repository":{"url":"https://github.com/servosity/msp-skills","source":"github","subfolder":"skills/connectsecure"},"version":"0.1.1","icons":[{"src":"https://raw.githubusercontent.com/servosity/msp-skills/main/docs/assets/social/connectsecure/connectsecure-512x512.png","mimeType":"image/png","sizes":["512x512"]}],"packages":[{"registryType":"mcpb","identifier":"https://github.com/Servosity/msp-skills/releases/download/connectsecure-v0.1.1/connectsecure-mcp.mcpb","version":"0.1.1","fileSha256":"b4b4a6281b69c1bf8ea24b90b12ff33c8d4ed800ac288a04f3e9eab9df3974eb","transport":{"type":"stdio"},"environmentVariables":[{"description":"Your tenant's pod URL, e.g. https://pod104.myconnectsecure.com (Profile > API Documentation in the portal). Each tenant has its own pod; there is no working default.","isRequired":true,"name":"CONNECTSECURE_BASE_URL"},{"description":"Tenant name you type on the ConnectSecure portal login screen.","isRequired":true,"name":"CONNECTSECURE_TENANT"},{"description":"API client ID from Settings > Users > (user) > API Key.","isRequired":true,"isSecret":true,"name":"CONNECTSECURE_CLIENT_ID"},{"description":"API client secret from Settings > Users > (user) > API Key.","isRequired":true,"isSecret":true,"name":"CONNECTSECURE_CLIENT_SECRET"},{"description":"Optional. A pre-minted JWT from /w/authorize; while it is unexpired it is used instead of minting one. The tenant, client ID and secret are still needed so the CLI can mint a fresh token once it expires.","isSecret":true,"name":"CONNECTSECURE_ACCESS_TOKEN"},{"description":"Optional user_id from /w/authorize. Only needed with a pre-minted access token; minting fills it automatically.","name":"CONNECTSECURE_USER_ID"},{"description":"Set to 1 to make the MCP server refuse every write and hide the sync, export and tail tools (import is never an MCP tool). Credential reads are still answered.","name":"CONNECTSECURE_MCP_READ_ONLY"},{"description":"Overrides the User-Agent the CLI sends on ConnectSecure requests.","name":"CONNECTSECURE_USER_AGENT"},{"description":"Required only when running the MCP server with --transport http. Not needed for the default local stdio transport.","isSecret":true,"name":"CONNECTSECURE_MCP_HTTP_TOKEN"},{"description":"Optional: binds the MCP server to a tenant-gated Printing Press client profile. This connector registers none; leave unset.","isSecret":true,"name":"PRINTING_PRESS_CLIENT_PROFILE"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-16T06:48:00.728428Z","publishedAt":"2026-10-16T06:48:00.728428Z","updatedAt":"2026-10-16T06:48:00.728428Z","isLatest":true}}}