
CIPP
Connects Claude to the CyberDrain Improved Partner Portal for managing Microsoft 365 tenants at scale. Ships with 37 tools covering user lifecycle (create, offboard, reset MFA, revoke sessions), mailbox permissions and forwarding, Conditional Access policies, license reporting across your CSP, and GDAP role management. Authenticates via OAuth client credentials or static Bearer token. If you're an MSP running CIPP and want to automate tenant drift checks, bulk user operations, or pull audit logs without switching contexts, this bridges your AI workflow directly into the CIPP API. Built for stdio transport with Claude Desktop.
- GitHub stars
- 13
- tools
- 49
- auth
- Secret needed
- transport
- STDIO
- env vars
- 7
- last updated
- Aug 13, 2026
Tools
49 toolsPublic tool metadata for what this MCP can expose to an agent.
list_tenantsTenant management tool.
Tenant management tool.
No parameter schema in public metadata yet.
get_tenant_details
No parameter schema in public metadata yet.
list_users
No parameter schema in public metadata yet.
create_user
No parameter schema in public metadata yet.
edit_user
No parameter schema in public metadata yet.
disable_user
No parameter schema in public metadata yet.
reset_password
No parameter schema in public metadata yet.
reset_mfa
No parameter schema in public metadata yet.
revoke_sessions
No parameter schema in public metadata yet.
offboard_user
No parameter schema in public metadata yet.
bec_check
No parameter schema in public metadata yet.
list_mfa_users
No parameter schema in public metadata yet.
list_user_devices
No parameter schema in public metadata yet.
list_user_groups
No parameter schema in public metadata yet.
list_user_signin_logs
No parameter schema in public metadata yet.
list_groups
No parameter schema in public metadata yet.
create_group
No parameter schema in public metadata yet.
list_mailboxes
No parameter schema in public metadata yet.
list_mailbox_permissions
No parameter schema in public metadata yet.
list_trusted_blocked_senders
No parameter schema in public metadata yet.
list_mailbox_usage
No parameter schema in public metadata yet.
get_mailbox_usage
No parameter schema in public metadata yet.
set_out_of_office
No parameter schema in public metadata yet.
set_email_forwarding
No parameter schema in public metadata yet.
list_conditional_access_policies
No parameter schema in public metadata yet.
list_named_locations
No parameter schema in public metadata yet.
get_secure_score
No parameter schema in public metadata yet.
list_secure_score_controls
No parameter schema in public metadata yet.
list_enterprise_apps
No parameter schema in public metadata yet.
list_standards
No parameter schema in public metadata yet.
run_standards_check
No parameter schema in public metadata yet.
list_standard_templates
No parameter schema in public metadata yet.
get_tenant_drift
No parameter schema in public metadata yet.
get_tenant_alignment
No parameter schema in public metadata yet.
create_standard_template
No parameter schema in public metadata yet.
delete_standard_template
No parameter schema in public metadata yet.
list_bpa
No parameter schema in public metadata yet.
list_domain_health
No parameter schema in public metadata yet.
list_licenses
No parameter schema in public metadata yet.
list_csp_licenses
No parameter schema in public metadata yet.
list_audit_logs
No parameter schema in public metadata yet.
list_alert_queue
No parameter schema in public metadata yet.
list_gdap_roles
No parameter schema in public metadata yet.
list_gdap_invites
No parameter schema in public metadata yet.
list_scheduled_items
No parameter schema in public metadata yet.
add_scheduled_item
No parameter schema in public metadata yet.
ping
No parameter schema in public metadata yet.
get_version
No parameter schema in public metadata yet.
list_logs
No parameter schema in public metadata yet.
Sponsors
Configuration
CIPP_API_URL*Base URL of your CIPP API instance (e.g. https://cipp-api.example.com)
CIPP_CLIENT_ID*Entra ID application (client) ID used to authenticate to CIPP
CIPP_CLIENT_SECRET*secretEntra ID client secret for the CIPP application
CIPP_TENANT_IDEntra ID tenant ID hosting the CIPP application registration
MCP_TRANSPORTdefault: stdioTransport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODEdefault: envCredential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVELdefault: infoLog verbosity: debug, info, warn, error
Readme
CIPP MCP Server
MCP (Model Context Protocol) server for CIPP — the CyberDrain Improved Partner Portal. Provides AI assistants with structured access to CIPP's M365 multi-tenant management capabilities.
Features
- 49 tools across 12 categories
- Tenant, user, group, and mailbox management
- Mailbox and online-archive size reporting, per tenant or per user
- Per-user Entra ID sign-in logs (status, location, Conditional Access, MFA)
- Security: Conditional Access policies, named locations, Microsoft Secure Score
- Standards & compliance: BPA, domain health, drift detection
- License reporting (per-tenant and CSP-wide)
- Alerts, audit logs, and scheduled tasks
- GDAP role and invite management
- Stdio and HTTP transport modes
- MCP Gateway compatible
Prerequisites
- Node.js 18+
- A running CIPP deployment
- CIPP API Key (generated from CIPP Settings → API Client Management)
Installation
Via npm (once published)
npx cipp-mcp
From source
git clone https://github.com/WYRE-AI/cipp-mcp
cd cipp-mcp
npm install
npm run build
Configuration
Details
- Repository
- github.com/wyre-technology/cipp-mcp
- Website
- github.com/wyre-technology/cipp-mcp
- Package
ghcr.io/wyre-technology/cipp-mcp:v1.7.3- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active
More from wyre-technology
- QuickBooks Online2
- ConnectWise Automate1
- Kaseya Quote Manager1
- Mimecast1
- Xero1
- Datto SaaS Protection2
- ThreatLocker1
- Abnormal Security
- Alternative Payments
- Blumira
- Datto BCDR
- Kaseya BMS
- Kaseya VSA
- KnowBe4
- Unitrends Backup
- Auvik1
- Avanan1
- Atera
- Blackpoint Cyber
- ImmyBot
- SalesBuildr
- Spanning Cloud Backup
- Avanan MSP (Legacy SmartAPI)
- IQMS / DELMIA Apriso