WatchGuard MCP Setup & Guide

{
  "id": "io.github.Servosity/watchguard-mcp",
  "type": "mcp-server",
  "version": "0.1.1",
  "displayName": "WatchGuard MCP",
  "description": "WatchGuard Cloud Firebox, Endpoint Security, ThreatSync, NDR and AuthPoint APIs for every customer",
  "repository": {
    "url": "https://github.com/servosity/msp-skills",
    "source": "github",
    "subfolder": "skills/watchguard"
  },
  "distribution": {
    "packages": [
      {
        "registryType": "mcpb",
        "identifier": "https://github.com/Servosity/msp-skills/releases/download/watchguard-v0.1.1/watchguard-mcp.mcpb",
        "version": "0.1.1",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "WATCHGUARD_CLIENT_ID",
            "description": "WatchGuard Cloud API Access ID (read-write or read-only).",
            "isRequired": true,
            "isSecret": true
          },
          {
            "name": "WATCHGUARD_CLIENT_SECRET",
            "description": "Password for that Access ID.",
            "isRequired": true,
            "isSecret": true
          },
          {
            "name": "WATCHGUARD_API_KEY",
            "description": "WatchGuard Cloud API key (WatchGuard-API-Key header).",
            "isRequired": true,
            "isSecret": true
          },
          {
            "name": "WATCHGUARD_ACCOUNT_ID",
            "description": "Your WatchGuard Cloud account ID (ACC-... or WGC-...).",
            "isRequired": true
          },
          {
            "name": "WATCHGUARD_BASE_URL",
            "description": "Optional: region API base URL; default https://api.usa.cloud.watchguard.com (EMEA api.deu, APAC api.jpn)."
          },
          {
            "name": "WATCHGUARD_TOKEN_URL",
            "description": "Optional: region OAuth token URL; default https://api.usa.cloud.watchguard.com/oauth/token."
          },
          {
            "name": "WATCHGUARD_AUDIENCE",
            "description": "Optional: a managed account's audience value; requests use that customer's token (not a security boundary)."
          },
          {
            "name": "WATCHGUARD_OAUTH_SCOPE",
            "description": "Optional: OAuth scope to request; default api-access."
          },
          {
            "name": "WATCHGUARD_USER_AGENT",
            "description": "Optional: override the User-Agent the CLI sends."
          },
          {
            "name": "WATCHGUARD_MCP_READ_ONLY",
            "description": "Optional: set to 1 to run the MCP server read-only."
          },
          {
            "name": "WATCHGUARD_MCP_HTTP_TOKEN",
            "description": "Bearer token callers must present when the server runs with --transport http; not used by the stdio transport.",
            "isSecret": true
          },
          {
            "name": "PRINTING_PRESS_CLIENT_PROFILE",
            "description": "Not enforced by this connector (no tenant-gated profiles); leave unset. It does not limit which accounts a call can reach."
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode",
    "trae",
    "cherry-studio",
    "lingma",
    "windsurf",
    "cline",
    "workbuddy"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.Servosity/watchguard-mcp",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.Servosity%2Fwatchguard-mcp/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}