wyre-technology avatar

CIPP

wyre-technology/cipp-mcp

Connects Claude to the CyberDrain Improved Partner Portal for managing Microsoft 365 tenants at scale. Ships with 37 tools covering user lifecycle (create, offboard, reset MFA, revoke sessions), mailbox permissions and forwarding, Conditional Access policies, license reporting across your CSP, and GDAP role management. Authenticates via OAuth client credentials or static Bearer token. If you're an MSP running CIPP and want to automate tenant drift checks, bulk user operations, or pull audit logs without switching contexts, this bridges your AI workflow directly into the CIPP API. Built for stdio transport with Claude Desktop.

GitHub stars
13
tools
49
auth
Secret needed
transport
STDIO
env vars
7
last updated
Aug 13, 2026

Tools

49 tools

Public tool metadata for what this MCP can expose to an agent.

list_tenantsTenant management tool.

Tenant management tool.

No parameter schema in public metadata yet.

get_tenant_details

No parameter schema in public metadata yet.

list_users

No parameter schema in public metadata yet.

create_user

No parameter schema in public metadata yet.

edit_user

No parameter schema in public metadata yet.

disable_user

No parameter schema in public metadata yet.

reset_password

No parameter schema in public metadata yet.

reset_mfa

No parameter schema in public metadata yet.

revoke_sessions

No parameter schema in public metadata yet.

offboard_user

No parameter schema in public metadata yet.

bec_check

No parameter schema in public metadata yet.

list_mfa_users

No parameter schema in public metadata yet.

list_user_devices

No parameter schema in public metadata yet.

list_user_groups

No parameter schema in public metadata yet.

list_user_signin_logs

No parameter schema in public metadata yet.

list_groups

No parameter schema in public metadata yet.

create_group

No parameter schema in public metadata yet.

list_mailboxes

No parameter schema in public metadata yet.

list_mailbox_permissions

No parameter schema in public metadata yet.

list_trusted_blocked_senders

No parameter schema in public metadata yet.

list_mailbox_usage

No parameter schema in public metadata yet.

get_mailbox_usage

No parameter schema in public metadata yet.

set_out_of_office

No parameter schema in public metadata yet.

set_email_forwarding

No parameter schema in public metadata yet.

list_conditional_access_policies

No parameter schema in public metadata yet.

list_named_locations

No parameter schema in public metadata yet.

get_secure_score

No parameter schema in public metadata yet.

list_secure_score_controls

No parameter schema in public metadata yet.

list_enterprise_apps

No parameter schema in public metadata yet.

list_standards

No parameter schema in public metadata yet.

run_standards_check

No parameter schema in public metadata yet.

list_standard_templates

No parameter schema in public metadata yet.

get_tenant_drift

No parameter schema in public metadata yet.

get_tenant_alignment

No parameter schema in public metadata yet.

create_standard_template

No parameter schema in public metadata yet.

delete_standard_template

No parameter schema in public metadata yet.

list_bpa

No parameter schema in public metadata yet.

list_domain_health

No parameter schema in public metadata yet.

list_licenses

No parameter schema in public metadata yet.

list_csp_licenses

No parameter schema in public metadata yet.

list_audit_logs

No parameter schema in public metadata yet.

list_alert_queue

No parameter schema in public metadata yet.

list_gdap_roles

No parameter schema in public metadata yet.

list_gdap_invites

No parameter schema in public metadata yet.

list_scheduled_items

No parameter schema in public metadata yet.

add_scheduled_item

No parameter schema in public metadata yet.

ping

No parameter schema in public metadata yet.

get_version

No parameter schema in public metadata yet.

list_logs

No parameter schema in public metadata yet.

Sponsors

Configuration

CIPP_API_URL*

Base URL of your CIPP API instance (e.g. https://cipp-api.example.com)

CIPP_CLIENT_ID*

Entra ID application (client) ID used to authenticate to CIPP

CIPP_CLIENT_SECRET*secret

Entra ID client secret for the CIPP application

CIPP_TENANT_ID

Entra ID tenant ID hosting the CIPP application registration

MCP_TRANSPORTdefault: stdio

Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.

AUTH_MODEdefault: env

Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.

LOG_LEVELdefault: info

Log verbosity: debug, info, warn, error

Readme

CIPP MCP Server

MCP (Model Context Protocol) server for CIPP — the CyberDrain Improved Partner Portal. Provides AI assistants with structured access to CIPP's M365 multi-tenant management capabilities.

Features

  • 49 tools across 12 categories
  • Tenant, user, group, and mailbox management
  • Mailbox and online-archive size reporting, per tenant or per user
  • Per-user Entra ID sign-in logs (status, location, Conditional Access, MFA)
  • Security: Conditional Access policies, named locations, Microsoft Secure Score
  • Standards & compliance: BPA, domain health, drift detection
  • License reporting (per-tenant and CSP-wide)
  • Alerts, audit logs, and scheduled tasks
  • GDAP role and invite management
  • Stdio and HTTP transport modes
  • MCP Gateway compatible

Prerequisites

  • Node.js 18+
  • A running CIPP deployment
  • CIPP API Key (generated from CIPP Settings → API Client Management)

Installation

Via npm (once published)

npx cipp-mcp

From source

git clone https://github.com/WYRE-AI/cipp-mcp
cd cipp-mcp
npm install
npm run build

Configuration


View the full README on GitHub

Details

Repository
github.com/wyre-technology/cipp-mcp
Website
github.com/wyre-technology/cipp-mcp
Package
ghcr.io/wyre-technology/cipp-mcp:v1.7.3
Transport
STDIO
Auth
Required
Registry
MCP registry, active

More from wyre-technology