CIPP MCP

{
  "version": "0.1.13",
  "transport": "stdio",
  "fileSha256": "3907e2184331ebb2161a795c8098d4cf586553e8dd74b1365c09350d0f3eed4a",
  "identifier": "https://github.com/Servosity/msp-skills/releases/download/cipp-v0.1.13/cipp-mcp.mcpb",
  "registryType": "mcpb",
  "environmentVariables": [
    {
      "name": "CIPP_API_KEY",
      "isRequired": true,
      "description": "Set the CIPP_API_KEY credential for the CIPP MCP server."
    },
    {
      "name": "CIPP_BASE_URL",
      "isRequired": true,
      "description": "Base URL of your self-hosted CIPP instance's API, e.g. https://cipp.example.com/api. The shipped default points at an example host, so until you set this the CLI is not talking to your tenant at all."
    },
    {
      "name": "CIPP_NO_CONFIG_WRITE",
      "description": "Set to 1 to keep credentials off disk: auth login and auth set-token refuse and nothing is written, so supply the bearer token in CIPP_API_KEY. Leave blank for the default, which keeps the minted token in the credentials file."
    },
    {
      "name": "CIPP_USER_AGENT",
      "description": "Overrides the User-Agent the CLI sends on CIPP requests. Leave blank to use the CLI's own built-in User-Agent."
    },
    {
      "name": "CIPP_MCP_READ_ONLY",
      "description": "Optional. Set to exactly 1 to drop every MCP tool not marked read-only, cipp_execute included. Leave blank to allow writes, which run only after a preview the agent confirms."
    },
    {
      "name": "CIPP_NO_LOCAL_DATA",
      "description": "Optional. Set to exactly 1 to keep no local copy of CIPP data: reads go to the API, the response cache is off, and fanout --save and --resume refuse to run. Leave blank to keep the local store."
    },
    {
      "name": "CIPP_MCP_HTTP_TOKEN",
      "description": "Required only when running the MCP server with --transport http (a remote/hosted deployment); callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport Claude Desktop uses."
    }
  ]
}