Blackpoint Cyber
Connects to Blackpoint Cyber's CompassOne MDR platform to query security detections, manage endpoints, and track vulnerabilities across your infrastructure. Uses a decision tree navigation pattern where you pick a domain (tenants, assets, detections, vulnerabilities), then get access to domain-specific operations like listing endpoint inventory, pulling detection telemetry, or checking dark web exposure scans. Built for partner-tier access with proper tenant scoping, which matters if you're managing multiple customer environments. Supports both stdio and gateway mode with per-request authentication via HTTP headers. Currently covers the core read operations; write operations like asset isolation or ticket management are mapped in the SDK but not yet wired up in the MCP layer.
- tools
- 7
- auth
- Secret needed
- transport
- STDIO
- env vars
- 5
- last updated
- Aug 20, 2026
Tools
7 toolsPublic tool metadata for what this MCP can expose to an agent.
blackpoint_statusReports current health and available domains.
Reports current health and available domains.
No parameter schema in public metadata yet.
blackpoint_navigateOptional guided menu navigation to a domain for clients that prefer it.
Optional guided menu navigation to a domain for clients that prefer it.
No parameter schema in public metadata yet.
blackpoint_backOptional return to the navigation menu for clients that prefer it.
Optional return to the navigation menu for clients that prefer it.
No parameter schema in public metadata yet.
blackpoint_assets_listAsset inventory by class.
Asset inventory by class.
No parameter schema in public metadata yet.
blackpoint_assets_getAsset inventory and relationships.
Asset inventory and relationships.
No parameter schema in public metadata yet.
blackpoint_detections_listAlert groups with OPEN or RESOLVED status.
Alert groups with OPEN or RESOLVED status.
No parameter schema in public metadata yet.
blackpoint_vulnerabilities_scans_listList vulnerability scans.
List vulnerability scans.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
BLACKPOINT_API_TOKEN*secretBlackpoint Cyber API token (Bearer credential)
BLACKPOINT_BASE_URLBlackpoint API base URL (region-specific). Optional — defaults to the production US endpoint.
MCP_TRANSPORTdefault: stdioTransport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODEdefault: envCredential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVELdefault: infoLog verbosity: debug, info, warn, error
Readme
blackpoint-mcp
Model Context Protocol (MCP) server for Blackpoint Cyber CompassOne - Managed Detection and Response (MDR) platform.
Features
This MCP server provides access to CompassOne's security capabilities through a decision-tree navigation interface:
Available Domains
- 🏢 Tenants: Customer tenant management
- 💻 Assets: Inventory by documented class (
CONTAINER,DEVICE,FRAMEWORK,NETSTAT,PERSON,PROCESS,SERVICE,SOFTWARE,SOURCE,SURVEY,USER).CLOUDis not an asset class. - 🔍 Detections: Alert groups from
GET /alert-groups(OPEN/RESOLVED,skip/take) - 🛡️ Vulnerabilities: Vulnerability management, dark web monitoring, external exposure scanning
Domain Structure
All implemented tools are listed together in a single tools/list call — no
navigation step required. blackpoint_status reports current health and
available domains, and blackpoint_navigate/blackpoint_back remain for
clients that like a guided menu, but they're optional: every domain tool
(blackpoint_tenants_*, blackpoint_assets_*, blackpoint_detections_*,
blackpoint_vulnerabilities_*) is callable directly from the start.
Details
- Repository
- github.com/wyre-technology/blackpoint-mcp
- Website
- github.com/wyre-technology/blackpoint-mcp
- Package
ghcr.io/wyre-technology/blackpoint-mcp:v1.1.12- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active