Fortinet MCP

{
  "version": "0.1.4",
  "transport": "stdio",
  "fileSha256": "b6a0d35d958eda086d3fc15e656edfed5f08cd794da177c2f18c673909f55506",
  "identifier": "https://github.com/Servosity/msp-skills/releases/download/fortinet-v0.1.4/fortinet-mcp.mcpb",
  "registryType": "mcpb",
  "environmentVariables": [
    {
      "name": "FORTINET_BASE_URL",
      "isRequired": true,
      "description": "Your FortiGate's REST API root, e.g. https://203.0.113.10:8443/api/v2."
    },
    {
      "name": "FORTINET_API_TOKEN",
      "isRequired": true,
      "description": "The FortiGate REST API admin token (System > Administrators > Create New > REST API Admin). Use a read-only admin profile."
    },
    {
      "name": "FORTINET_DEVICES",
      "description": "Optional. Path to a devices.toml listing every FortiGate the fleet, audit and policies hygiene commands check, each with a token_file. Leave blank to check only the FortiGate above."
    },
    {
      "name": "FORTINET_FMG_URL",
      "description": "Optional. https://<fortimanager> for the read-only fmg commands. Leave blank if you do not use FortiManager."
    },
    {
      "name": "FORTINET_FMG_API_KEY",
      "description": "Optional. API key of a FortiManager REST API admin (FortiManager 7.2.2 or later) for the fmg commands."
    },
    {
      "name": "FORTINET_CLOUD_API_USER",
      "description": "Optional. FortiCloud IAM API user (with FortiGate Cloud portal permission) for the read-only cloud commands."
    },
    {
      "name": "FORTINET_CLOUD_API_PASSWORD",
      "description": "Optional. Password of the FortiCloud IAM API user. Repeated failed logins lock the FortiCloud account for 15-30 minutes."
    },
    {
      "name": "FORTINET_CLOUD_REGION",
      "description": "Optional. global (default), us, eu or jp: the region your FortiGates were provisioned in."
    },
    {
      "name": "FORTINET_CLOUD_ACCOUNT_ID",
      "description": "Optional. Required only when FortiCloud Organizations are enabled."
    },
    {
      "name": "FORTINET_MCP_READ_ONLY",
      "default": "1",
      "description": "Optional. Set to 1 to expose only read-only mirrored tools and refuse any non-GET execute call."
    },
    {
      "name": "FORTINET_MCP_HTTP_TOKEN",
      "description": "Required only when running the MCP server with --transport http (a remote/hosted deployment); callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport Claude Desktop uses."
    },
    {
      "name": "FORTINET_USER_AGENT",
      "description": "Optional. Overrides the User-Agent the CLI sends to your FortiGates. Leave blank to use the built-in one."
    },
    {
      "name": "PRINTING_PRESS_CLIENT_PROFILE",
      "description": "Only used when the MCP server is bound to a tenant-gated client profile. This connector registers no tenant-gated source, so leave it blank."
    }
  ]
}