Loading
Sophos Central MCP
Power your agent
Add this server
The publisher's own command. Not a PlugMCP endpoint.
Host a copy with our keys and logs.
Local command
mcpb https://github.com/Servosity/msp-skills/releases/download/sophos-central-v0.1.4/sophos-central-mcp.mcpbCredentials from the publisher
- SOPHOS_CENTRAL_CLIENT_ID — Client ID of a Sophos Central API credential (Partner Dashboard > Settings & Policies > API Credentials, or Global Settings > API Credentials Management).
- SOPHOS_CENTRAL_CLIENT_SECRET — Client secret of that API credential. Sophos shows it only once, when the credential is created.
- SOPHOS_CENTRAL_TENANT_ID — Optional. With a partner or organization credential, the customer tenant ID that tenant-scoped tools act on. Leave blank to let the fleet tools walk every customer; tools that take a tenant argument can still pick one per call.
- SOPHOS_CENTRAL_BASE_URL — Optional. Leave blank: requests go to https://api.central.sophos.com and each tenant's regional host is found automatically.
- SOPHOS_CENTRAL_TOKEN_URL — Optional. Leave blank to use https://id.sophos.com/api/v2/oauth2/token.
- SOPHOS_CENTRAL_OAUTH_SCOPE — Optional. Leave blank to use the scope Sophos Central documents (token).
- SOPHOS_CENTRAL_MCP_READ_ONLY — Optional. Set to 1 to make the MCP server refuse every non-GET call and hide the sync and export tools. It does not replace giving the API credential a read-only role.
- SOPHOS_CENTRAL_NO_LOCAL_DATA — Optional. Set to 1 to keep no local copy of API responses: reads go to the API, the response cache is off, and sync and fleet refresh refuse to run. Leave blank to keep the local store.
- SOPHOS_CENTRAL_MCP_HTTP_TOKEN — Required only when running the MCP server with --transport http (a remote or hosted deployment); callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport Claude Desktop uses.
- SOPHOS_CENTRAL_USER_AGENT — Optional. Overrides the User-Agent the CLI sends to Sophos Central. Leave blank to use the built-in one.
- PRINTING_PRESS_CLIENT_PROFILE — Only used when the MCP server is bound to a tenant-gated client profile. This connector registers no tenant-gated source, so leave it blank.
Claude Code has no install link for a local command. Copy the command below and run it in a terminal.
shClaude Code
SOPHOS_CENTRAL_CLIENT_ID=<secret> SOPHOS_CENTRAL_CLIENT_SECRET=<secret> SOPHOS_CENTRAL_TENANT_ID=<value> SOPHOS_CENTRAL_BASE_URL=<value> SOPHOS_CENTRAL_TOKEN_URL=<value> SOPHOS_CENTRAL_OAUTH_SCOPE=<value> SOPHOS_CENTRAL_MCP_READ_ONLY=<value> SOPHOS_CENTRAL_NO_LOCAL_DATA=<value> SOPHOS_CENTRAL_MCP_HTTP_TOKEN=<secret> SOPHOS_CENTRAL_USER_AGENT=<value> PRINTING_PRESS_CLIENT_PROFILE=<secret> claude mcp add io.github.servosity-sophos-central-mcp -- mcpb https://github.com/Servosity/msp-skills/releases/download/sophos-central-v0.1.4/sophos-central-mcp.mcpbRun in a terminal.
jsonClaude Desktop
{ "mcpServers": { "io.github.servosity-sophos-central-mcp": { "command": "mcpb", "args": [ "https://github.com/Servosity/msp-skills/releases/download/sophos-central-v0.1.4/sophos-central-mcp.mcpb" ], "env": { "SOPHOS_CENTRAL_CLIENT_ID": "<secret>", "SOPHOS_CENTRAL_CLIENT_SECRET": "<secret>", "SOPHOS_CENTRAL_TENANT_ID": "<value>", "SOPHOS_CENTRAL_BASE_URL": "<value>", "SOPHOS_CENTRAL_TOKEN_URL": "<value>", "SOPHOS_CENTRAL_OAUTH_SCOPE": "<value>", "SOPHOS_CENTRAL_MCP_READ_ONLY": "<value>", "SOPHOS_CENTRAL_NO_LOCAL_DATA": "<value>", "SOPHOS_CENTRAL_MCP_HTTP_TOKEN": "<secret>", "SOPHOS_CENTRAL_USER_AGENT": "<value>", "PRINTING_PRESS_CLIENT_PROFILE": "<secret>" } } }}claude_desktop_config.json
Local · mcpbPublisher installStep-by-step: add this in Claude
Remote URL or a command on your machine? How the two installs differ
Run on PlugMCP
Host a copy with our keys and logs.
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
LaunchTools
Tools
No tool list yet. Remote servers get one after the first health check.
FAQ