Fortinet MCP配置与使用教程

{
  "id": "io.github.Servosity/fortinet-mcp",
  "type": "mcp-server",
  "version": "0.1.1",
  "displayName": "Fortinet MCP",
  "description": "Audit every client FortiGate for firmware, SSL-VPN exposure, admin accounts and license expiry.",
  "repository": {
    "url": "https://github.com/servosity/msp-skills",
    "source": "github",
    "subfolder": "skills/fortinet"
  },
  "distribution": {
    "packages": [
      {
        "registryType": "mcpb",
        "identifier": "https://github.com/Servosity/msp-skills/releases/download/fortinet-v0.1.1/fortinet-mcp.mcpb",
        "version": "0.1.1",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "FORTINET_BASE_URL",
            "description": "Your FortiGate's REST API root, e.g. https://203.0.113.10:8443/api/v2.",
            "isRequired": true
          },
          {
            "name": "FORTINET_API_TOKEN",
            "description": "The FortiGate REST API admin token (System > Administrators > Create New > REST API Admin). Use a read-only admin profile.",
            "isRequired": true,
            "isSecret": true
          },
          {
            "name": "FORTINET_DEVICES",
            "description": "Optional. Path to a devices.toml listing every FortiGate the fleet, audit and policies hygiene commands check, each with a token_file. Leave blank to check only the FortiGate above."
          },
          {
            "name": "FORTINET_FMG_URL",
            "description": "Optional. https://<fortimanager> for the read-only fmg commands. Leave blank if you do not use FortiManager."
          },
          {
            "name": "FORTINET_FMG_API_KEY",
            "description": "Optional. API key of a FortiManager REST API admin (FortiManager 7.2.2 or later) for the fmg commands.",
            "isSecret": true
          },
          {
            "name": "FORTINET_CLOUD_API_USER",
            "description": "Optional. FortiCloud IAM API user (with FortiGate Cloud portal permission) for the read-only cloud commands."
          },
          {
            "name": "FORTINET_CLOUD_API_PASSWORD",
            "description": "Optional. Password of the FortiCloud IAM API user. Repeated failed logins lock the FortiCloud account for 15-30 minutes.",
            "isSecret": true
          },
          {
            "name": "FORTINET_CLOUD_REGION",
            "description": "Optional. global (default), us, eu or jp: the region your FortiGates were provisioned in."
          },
          {
            "name": "FORTINET_CLOUD_ACCOUNT_ID",
            "description": "Optional. Required only when FortiCloud Organizations are enabled."
          },
          {
            "name": "FORTINET_MCP_READ_ONLY",
            "description": "Optional. Set to 1 to expose only read-only mirrored tools and refuse any non-GET execute call."
          },
          {
            "name": "FORTINET_MCP_HTTP_TOKEN",
            "description": "Required only when running the MCP server with --transport http (a remote/hosted deployment); callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport Claude Desktop uses.",
            "isSecret": true
          },
          {
            "name": "FORTINET_USER_AGENT",
            "description": "Optional. Overrides the User-Agent the CLI sends to your FortiGates. Leave blank to use the built-in one."
          },
          {
            "name": "PRINTING_PRESS_CLIENT_PROFILE",
            "description": "Only used when the MCP server is bound to a tenant-gated client profile. This connector registers no tenant-gated source, so leave it blank.",
            "isSecret": true
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode",
    "trae",
    "cherry-studio",
    "lingma",
    "windsurf",
    "cline",
    "workbuddy"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.Servosity/fortinet-mcp",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.Servosity%2Ffortinet-mcp/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}