ConnectSecure MCP

{
  "version": "0.1.5",
  "transport": "stdio",
  "fileSha256": "0006a8d03f009d880012a07d87a2dc64dc654f5046d7e6db523bf0ad8f8a0a53",
  "identifier": "https://github.com/Servosity/msp-skills/releases/download/connectsecure-v0.1.5/connectsecure-mcp.mcpb",
  "registryType": "mcpb",
  "environmentVariables": [
    {
      "name": "CONNECTSECURE_BASE_URL",
      "isRequired": true,
      "description": "Your tenant's pod URL, e.g. https://pod104.myconnectsecure.com (Profile > API Documentation in the portal). Each tenant has its own pod; there is no working default."
    },
    {
      "name": "CONNECTSECURE_TENANT",
      "isRequired": true,
      "description": "Tenant name you type on the ConnectSecure portal login screen."
    },
    {
      "name": "CONNECTSECURE_CLIENT_ID",
      "isRequired": true,
      "description": "API client ID from Settings > Users > (user) > API Key."
    },
    {
      "name": "CONNECTSECURE_CLIENT_SECRET",
      "isRequired": true,
      "description": "API client secret from Settings > Users > (user) > API Key."
    },
    {
      "name": "CONNECTSECURE_ACCESS_TOKEN",
      "description": "Optional. A pre-minted JWT from /w/authorize; while it is unexpired it is used instead of minting one. The tenant, client ID and secret are still needed so the CLI can mint a fresh token once it expires."
    },
    {
      "name": "CONNECTSECURE_USER_ID",
      "description": "Optional user_id from /w/authorize. Only needed with a pre-minted access token; minting fills it automatically."
    },
    {
      "name": "CONNECTSECURE_MCP_READ_ONLY",
      "default": "1",
      "description": "Set to 1 to make the MCP server refuse every write and hide the sync, export and tail tools (import is never an MCP tool). Credential reads are still answered."
    },
    {
      "name": "CONNECTSECURE_USER_AGENT",
      "description": "Overrides the User-Agent the CLI sends on ConnectSecure requests."
    },
    {
      "name": "CONNECTSECURE_MCP_HTTP_TOKEN",
      "description": "Required only when running the MCP server with --transport http. Not needed for the default local stdio transport."
    },
    {
      "name": "PRINTING_PRESS_CLIENT_PROFILE",
      "description": "Optional: binds the MCP server to a tenant-gated Printing Press client profile. This connector registers none; leave unset."
    },
    {
      "name": "CONNECTSECURE_NO_LOCAL_DATA",
      "description": "Optional. Set to 1 to keep no local copy of API responses: reads go to the API, the response cache is off, and sync refuses to run. Leave blank to keep the local store."
    },
    {
      "name": "CONNECTSECURE_MCP_UPLOAD_ROOT",
      "description": "Optional. Leave blank: MCP file uploads then take the file as base64 content and the server never opens a local path. Set it to a folder only to let MCP uploads read files from inside that folder."
    }
  ]
}