maciekaz avatar

Eset Mcp

maciekaz/eset-mcp

A unified MCP interface to ESET's entire management surface: ESET Connect cloud across all regions, on-prem ESET PROTECT, Inspect, and Cloud Office. Ships with 102 auto-generated tools from official OpenAPI specs covering device management, policy enforcement, incident investigation, patch management, and quarantine operations. Supports multi-tenant deployments where each request carries its own credentials and optional routing headers to switch between cloud regions or on-prem consoles in the same process. Built-in read-only mode gates all write operations at the catalog level. Handles OAuth token pooling per tenant, response size capping to protect context windows, and optional Cloudflare Access tunneling. Reach for this when you need LLM-driven security workflows across multiple ESET deployments without building custom integrations for each API surface.

GitHub stars
6
tools
4
transport
STDIO
last updated
Nov 4, 2026

Tools

4 tools

Public tool metadata for what this MCP can expose to an agent.

eset_searchCase-insensitive substring matches across devices / users / policies / groups

Case-insensitive substring matches across devices / users / policies / groups

No parameter schema in public metadata yet.

device_full_profileDevice record + recent detections + vulnerabilities + recent scans

Device record + recent detections + vulnerabilities + recent scans

No parameter schema in public metadata yet.

incident_full_contextIncident + comments + related detections + affected devices

Incident + comments + related detections + affected devices

No parameter schema in public metadata yet.

latest_detectionsNewest detections in a time window, sorted by occurTime desc; v2 → v1 fallback

Newest detections in a time window, sorted by occurTime desc; v2 → v1 fallback

No parameter schema in public metadata yet.

Sponsors

Readme

ESET-MCP

Tests License: MIT MCP spec

A Model Context Protocol server for the entire ESET management surface: ESET Connect (cloud, all regions), ESET PROTECT On-Prem, ESET Inspect, and ESET Cloud Office. Drive any of them from any MCP host (Claude Desktop, Claude Code, or a custom agent) through tools, resources, and prompts.


View the full README on GitHub

Details

Repository
github.com/maciekaz/eset-mcp
Package
ghcr.io/maciekaz/eset-mcp:2.0.0
Transport
STDIO
Registry
MCP registry, active