{"servers":[{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.Servosity/sophos-central-mcp","description":"The Sophos Central partner, organization and tenant APIs, routed to the right tenant and region","title":"Sophos Central MCP","repository":{"url":"https://github.com/servosity/msp-skills","source":"github","subfolder":"skills/sophos-central"},"version":"0.1.6","icons":[{"src":"https://raw.githubusercontent.com/servosity/msp-skills/main/docs/assets/social/sophos-central/sophos-central-512x512.png","mimeType":"image/png","sizes":["512x512"]}],"packages":[{"registryType":"mcpb","identifier":"https://github.com/Servosity/msp-skills/releases/download/sophos-central-v0.1.6/sophos-central-mcp.mcpb","version":"0.1.6","fileSha256":"8a8363820c5b956c43350804818164e8c717ff27c08a319b712a60202e736cd1","transport":{"type":"stdio"},"environmentVariables":[{"description":"Client ID of a Sophos Central API credential (Partner Dashboard \u003e Settings \u0026 Policies \u003e API Credentials, or Global Settings \u003e API Credentials Management).","isRequired":true,"isSecret":true,"name":"SOPHOS_CENTRAL_CLIENT_ID"},{"description":"Client secret of that API credential. Sophos shows it only once, when the credential is created.","isRequired":true,"isSecret":true,"name":"SOPHOS_CENTRAL_CLIENT_SECRET"},{"description":"Optional. With a partner or organization credential, the customer tenant ID that tenant-scoped tools act on. Leave blank to let the fleet tools walk every customer; tools that take a tenant argument can still pick one per call.","name":"SOPHOS_CENTRAL_TENANT_ID"},{"description":"Optional. Leave blank: requests go to https://api.central.sophos.com and each tenant's regional host is found automatically.","name":"SOPHOS_CENTRAL_BASE_URL"},{"description":"Optional. Leave blank to use https://id.sophos.com/api/v2/oauth2/token.","name":"SOPHOS_CENTRAL_TOKEN_URL"},{"description":"Optional. Leave blank to use the scope Sophos Central documents (token).","name":"SOPHOS_CENTRAL_OAUTH_SCOPE"},{"description":"Optional. Set to 1 to make the MCP server refuse every non-GET call and hide the sync and export tools. It does not replace giving the API credential a read-only role.","default":"1","name":"SOPHOS_CENTRAL_MCP_READ_ONLY"},{"description":"Optional. Set to 1 to keep no local copy of API responses: reads go to the API, the response cache is off, and sync and fleet refresh refuse to run. Leave blank to keep the local store.","name":"SOPHOS_CENTRAL_NO_LOCAL_DATA"},{"description":"Required only when running the MCP server with --transport http (a remote or hosted deployment); callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport Claude Desktop uses.","isSecret":true,"name":"SOPHOS_CENTRAL_MCP_HTTP_TOKEN"},{"description":"Optional. Overrides the User-Agent the CLI sends to Sophos Central. Leave blank to use the built-in one.","name":"SOPHOS_CENTRAL_USER_AGENT"},{"description":"Only used when the MCP server is bound to a tenant-gated client profile. This connector registers no tenant-gated source, so leave it blank.","isSecret":true,"name":"PRINTING_PRESS_CLIENT_PROFILE"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-11-10T20:29:28.442645Z","publishedAt":"2026-11-10T20:29:28.442645Z","updatedAt":"2026-11-10T20:29:28.442645Z","isLatest":true}}}],"metadata":{"count":1}}