Cisco Umbrella MCP
An open-source MCP server that provides access to Cisco Umbrella v2 API calls, including MSP child-org switching, domain verdicts, and list diffs. It is part of the msp-skills repository designed for local-first operation without requiring developer experience.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Perform Cisco Umbrella v2 API calls
- Switch between MSP child organizations
- Check domain verdicts
- Calculate list diffs
Source and maintenance
Community listingRegistry 0.1.1
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
https://github.com/Servosity/msp-skills/releases/download/cisco-umbrella-v0.1.1/cisco-umbrella-mcp.mcpb 0.1.1
mcpbSHA-256 supplied
https://github.com/Servosity/msp-skills/releases/download/cisco-umbrella-v0.1.1/cisco-umbrella-mcp.mcpb package definition
{
"version": "0.1.1",
"transport": "stdio",
"fileSha256": "22339cfd580c831f5dff1e9a82c192e7d4ce7735adefa7f0ce95193cb9327980",
"identifier": "https://github.com/Servosity/msp-skills/releases/download/cisco-umbrella-v0.1.1/cisco-umbrella-mcp.mcpb",
"registryType": "mcpb",
"environmentVariables": [
{
"name": "CISCO_UMBRELLA_API_KEY",
"isRequired": true,
"description": "Set the CISCO_UMBRELLA_API_KEY credential for the Cisco Umbrella MCP server."
},
{
"name": "CISCO_UMBRELLA_API_SECRET",
"isRequired": true,
"description": "Set the CISCO_UMBRELLA_API_SECRET credential for the Cisco Umbrella MCP server."
},
{
"name": "CISCO_UMBRELLA_ORG_ID",
"description": "Optional. Child org ID to act on from an MSP or Multi-org parent key (the same as --org). Leave blank to act on the key's own organization."
},
{
"name": "CISCO_UMBRELLA_BASE_URL",
"description": "Optional. Leave blank to use https://api.umbrella.com. Set it only to point at a different host, such as a test server; credentials then go to that host."
},
{
"name": "CISCO_UMBRELLA_TOKEN_URL",
"description": "Optional. Leave blank to use https://api.umbrella.com/auth/v2/token. It must be on the API host; a token URL on any other host is refused."
},
{
"name": "CISCO_UMBRELLA_OAUTH_SCOPE",
"description": "Optional. Scope sent with the token request. Leave blank: an Umbrella key already carries the scopes it was created with."
},
{
"name": "CISCO_UMBRELLA_MCP_READ_ONLY",
"description": "Optional. Set to exactly 1 to expose only read-only tools and refuse any state-changing execute call."
},
{
"name": "CISCO_UMBRELLA_NO_LOCAL_DATA",
"description": "Optional. Set to 1 to keep no local copy of API responses: reads go to the API and the response cache is off."
},
{
"name": "CISCO_UMBRELLA_MCP_HTTP_TOKEN",
"description": "Required only when running the MCP server with --transport http (a remote/hosted deployment). Callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport that Claude Desktop uses."
},
{
"name": "CISCO_UMBRELLA_MCP_UPLOAD_ROOT",
"description": "Optional. Leave blank. Reserved for MCP file uploads: no Cisco Umbrella MCP tool in this release takes a file, so the server never opens a local path and this setting has no effect."
},
{
"name": "CISCO_UMBRELLA_USER_AGENT",
"description": "Optional. Overrides the User-Agent the CLI sends on Umbrella requests. Leave blank to use the CLI's own built-in User-Agent."
},
{
"name": "PRINTING_PRESS_CLIENT_PROFILE",
"description": "Only used when the MCP server is bound to a tenant-gated client profile. This connector registers no tenant-gated source, so leave it blank; pick a customer with CISCO_UMBRELLA_ORG_ID instead."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Let your agent find its tools
Find servers like Cisco Umbrella MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.