{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.Servosity/sophos-central-mcp","description":"The Sophos Central partner, organization and tenant APIs, routed to the right tenant and region","title":"Sophos Central MCP","repository":{"url":"https://github.com/servosity/msp-skills","source":"github","subfolder":"skills/sophos-central"},"version":"0.1.1","icons":[{"src":"https://raw.githubusercontent.com/servosity/msp-skills/main/docs/assets/social/sophos-central/sophos-central-512x512.png","mimeType":"image/png","sizes":["512x512"]}],"packages":[{"registryType":"mcpb","identifier":"https://github.com/Servosity/msp-skills/releases/download/sophos-central-v0.1.1/sophos-central-mcp.mcpb","version":"0.1.1","fileSha256":"0a5ba124d6698e240708e8f8a3f64adf7f9c8a277dc5e1bd1071c08670709f76","transport":{"type":"stdio"},"environmentVariables":[{"description":"Client ID of a Sophos Central API credential (Partner Dashboard > Settings & Policies > API Credentials, or Global Settings > API Credentials Management).","isRequired":true,"isSecret":true,"name":"SOPHOS_CENTRAL_CLIENT_ID"},{"description":"Client secret of that API credential. Sophos shows it only once, when the credential is created.","isRequired":true,"isSecret":true,"name":"SOPHOS_CENTRAL_CLIENT_SECRET"},{"description":"Optional. With a partner or organization credential, the customer tenant ID that tenant-scoped tools act on. Leave blank to let the fleet tools walk every customer; tools that take a tenant argument can still pick one per call.","name":"SOPHOS_CENTRAL_TENANT_ID"},{"description":"Optional. Leave blank: requests go to https://api.central.sophos.com and each tenant's regional host is found automatically.","name":"SOPHOS_CENTRAL_BASE_URL"},{"description":"Optional. Leave blank to use https://id.sophos.com/api/v2/oauth2/token.","name":"SOPHOS_CENTRAL_TOKEN_URL"},{"description":"Optional. Leave blank to use the scope Sophos Central documents (token).","name":"SOPHOS_CENTRAL_OAUTH_SCOPE"},{"description":"Optional. Set to 1 to make the MCP server refuse every non-GET call and hide the sync and export tools. It does not replace giving the API credential a read-only role.","name":"SOPHOS_CENTRAL_MCP_READ_ONLY"},{"description":"Required only when running the MCP server with --transport http (a remote or hosted deployment); callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport Claude Desktop uses.","isSecret":true,"name":"SOPHOS_CENTRAL_MCP_HTTP_TOKEN"},{"description":"Optional. Overrides the User-Agent the CLI sends to Sophos Central. Leave blank to use the built-in one.","name":"SOPHOS_CENTRAL_USER_AGENT"},{"description":"Only used when the MCP server is bound to a tenant-gated client profile. This connector registers no tenant-gated source, so leave it blank.","isSecret":true,"name":"PRINTING_PRESS_CLIENT_PROFILE"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-16T07:07:20.523721Z","publishedAt":"2026-10-16T07:07:20.523721Z","updatedAt":"2026-10-16T07:07:20.523721Z","isLatest":true}}}