{"servers":[{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.Servosity/connectsecure-mcp","description":"Vulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spots","title":"ConnectSecure MCP","repository":{"url":"https://github.com/servosity/msp-skills","source":"github","subfolder":"skills/connectsecure"},"version":"0.1.7","icons":[{"src":"https://raw.githubusercontent.com/servosity/msp-skills/main/docs/assets/social/connectsecure/connectsecure-512x512.png","mimeType":"image/png","sizes":["512x512"]}],"packages":[{"registryType":"mcpb","identifier":"https://github.com/Servosity/msp-skills/releases/download/connectsecure-v0.1.7/connectsecure-mcp.mcpb","version":"0.1.7","fileSha256":"e8a6c553acc734213b01fd09c6b5161b2a31769fa25085441e36f71a51846853","transport":{"type":"stdio"},"environmentVariables":[{"description":"Your tenant's pod URL, e.g. https://pod104.myconnectsecure.com (Profile \u003e API Documentation in the portal). Each tenant has its own pod; there is no working default.","isRequired":true,"name":"CONNECTSECURE_BASE_URL"},{"description":"Tenant name you type on the ConnectSecure portal login screen.","isRequired":true,"name":"CONNECTSECURE_TENANT"},{"description":"API client ID from Settings \u003e Users \u003e (user) \u003e API Key.","isRequired":true,"isSecret":true,"name":"CONNECTSECURE_CLIENT_ID"},{"description":"API client secret from Settings \u003e Users \u003e (user) \u003e API Key.","isRequired":true,"isSecret":true,"name":"CONNECTSECURE_CLIENT_SECRET"},{"description":"Optional. A pre-minted JWT from /w/authorize; while it is unexpired it is used instead of minting one. The tenant, client ID and secret are still needed so the CLI can mint a fresh token once it expires.","isSecret":true,"name":"CONNECTSECURE_ACCESS_TOKEN"},{"description":"Optional user_id from /w/authorize. Only needed with a pre-minted access token; minting fills it automatically.","name":"CONNECTSECURE_USER_ID"},{"description":"Set to 1 to make the MCP server refuse every write and hide the sync, export and tail tools (import is never an MCP tool). Credential reads are still answered.","default":"1","name":"CONNECTSECURE_MCP_READ_ONLY"},{"description":"Overrides the User-Agent the CLI sends on ConnectSecure requests.","name":"CONNECTSECURE_USER_AGENT"},{"description":"Required only when running the MCP server with --transport http. Not needed for the default local stdio transport.","isSecret":true,"name":"CONNECTSECURE_MCP_HTTP_TOKEN"},{"description":"Optional: binds the MCP server to a tenant-gated Printing Press client profile. This connector registers none; leave unset.","isSecret":true,"name":"PRINTING_PRESS_CLIENT_PROFILE"},{"description":"Optional. Set to 1 to keep no local copy of API responses: reads go to the API, the response cache is off, and sync refuses to run. Leave blank to keep the local store.","name":"CONNECTSECURE_NO_LOCAL_DATA"},{"description":"Optional. Leave blank: MCP file uploads then take the file as base64 content and the server never opens a local path. Set it to a folder only to let MCP uploads read files from inside that folder.","name":"CONNECTSECURE_MCP_UPLOAD_ROOT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-11-10T17:15:31.121505Z","publishedAt":"2026-11-10T17:15:31.121505Z","updatedAt":"2026-11-10T17:15:31.121505Z","isLatest":true}}}],"metadata":{"count":1}}