Sophos Central MCP Setup & Guide

{
  "id": "io.github.Servosity/sophos-central-mcp",
  "type": "mcp-server",
  "version": "0.1.1",
  "displayName": "Sophos Central MCP",
  "description": "The Sophos Central partner, organization and tenant APIs, routed to the right tenant and region",
  "repository": {
    "url": "https://github.com/servosity/msp-skills",
    "source": "github",
    "subfolder": "skills/sophos-central"
  },
  "distribution": {
    "packages": [
      {
        "registryType": "mcpb",
        "identifier": "https://github.com/Servosity/msp-skills/releases/download/sophos-central-v0.1.1/sophos-central-mcp.mcpb",
        "version": "0.1.1",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "SOPHOS_CENTRAL_CLIENT_ID",
            "description": "Client ID of a Sophos Central API credential (Partner Dashboard > Settings & Policies > API Credentials, or Global Settings > API Credentials Management).",
            "isRequired": true,
            "isSecret": true
          },
          {
            "name": "SOPHOS_CENTRAL_CLIENT_SECRET",
            "description": "Client secret of that API credential. Sophos shows it only once, when the credential is created.",
            "isRequired": true,
            "isSecret": true
          },
          {
            "name": "SOPHOS_CENTRAL_TENANT_ID",
            "description": "Optional. With a partner or organization credential, the customer tenant ID that tenant-scoped tools act on. Leave blank to let the fleet tools walk every customer; tools that take a tenant argument can still pick one per call."
          },
          {
            "name": "SOPHOS_CENTRAL_BASE_URL",
            "description": "Optional. Leave blank: requests go to https://api.central.sophos.com and each tenant's regional host is found automatically."
          },
          {
            "name": "SOPHOS_CENTRAL_TOKEN_URL",
            "description": "Optional. Leave blank to use https://id.sophos.com/api/v2/oauth2/token."
          },
          {
            "name": "SOPHOS_CENTRAL_OAUTH_SCOPE",
            "description": "Optional. Leave blank to use the scope Sophos Central documents (token)."
          },
          {
            "name": "SOPHOS_CENTRAL_MCP_READ_ONLY",
            "description": "Optional. Set to 1 to make the MCP server refuse every non-GET call and hide the sync and export tools. It does not replace giving the API credential a read-only role."
          },
          {
            "name": "SOPHOS_CENTRAL_MCP_HTTP_TOKEN",
            "description": "Required only when running the MCP server with --transport http (a remote or hosted deployment); callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport Claude Desktop uses.",
            "isSecret": true
          },
          {
            "name": "SOPHOS_CENTRAL_USER_AGENT",
            "description": "Optional. Overrides the User-Agent the CLI sends to Sophos Central. Leave blank to use the built-in one."
          },
          {
            "name": "PRINTING_PRESS_CLIENT_PROFILE",
            "description": "Only used when the MCP server is bound to a tenant-gated client profile. This connector registers no tenant-gated source, so leave it blank.",
            "isSecret": true
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode",
    "trae",
    "cherry-studio",
    "lingma",
    "windsurf",
    "cline",
    "workbuddy"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.Servosity/sophos-central-mcp",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.Servosity%2Fsophos-central-mcp/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}