Inforcer MCP
A community-supported Model Context Protocol server providing AI assistants with structured, mostly read-only access to Inforcer Microsoft 365 baseline-governance data. It allows querying tenants, baselines, alignment/drift, policies, secure scores, identity, and audit logs. It also includes two high-impact write actions to trigger assessment runs or queue reports, requiring user confirmation.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
Checks and signals
Each line is separate evidence, not a trust score.
- Popularity 1 GitHub star
What you can do with it
- Query M365 tenant governance baselines and drift status
- Retrieve Microsoft Secure Score and identity data
- Trigger an assessment run for a specific tenant
- Queue report generation across multiple tenants
Source and maintenance
- Last repository push
- Latest release
- v1.1.3
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
ghcr.io/wyre-ai/inforcer-mcp:v1.1.3
{
"transport": "stdio",
"identifier": "ghcr.io/wyre-ai/inforcer-mcp:v1.1.3",
"registryType": "oci",
"environmentVariables": [
{
"name": "INFORCER_REGION",
"format": "string",
"isRequired": true,
"description": "Inforcer API region. One of: anz, eu, uk, us. Required."
},
{
"name": "INFORCER_API_KEY",
"format": "string",
"isRequired": true,
"description": "Inforcer API key (sent as the Inf-Api-Key header). Required."
},
{
"name": "MCP_TRANSPORT",
"format": "string",
"default": "stdio",
"description": "Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting."
},
{
"name": "AUTH_MODE",
"format": "string",
"default": "env",
"description": "Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway."
},
{
"name": "LOG_LEVEL",
"format": "string",
"default": "info",
"description": "Log verbosity: debug, info, warn, error"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Maintenance history
Public check and source-refresh events. Editorial and ownership records remain private.
- · repository · passed · metadata changed · updated
- · backfill · recorded · Pre-expansion baseline; unobserved rich metadata remains unknown
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"inforcer-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"INFORCER_REGION=<YOUR_INFORCER_REGION>",
"-e",
"INFORCER_API_KEY=<YOUR_INFORCER_API_KEY>",
"-e",
"MCP_TRANSPORT=<YOUR_MCP_TRANSPORT>",
"-e",
"AUTH_MODE=<YOUR_AUTH_MODE>",
"-e",
"LOG_LEVEL=<YOUR_LOG_LEVEL>",
"ghcr.io/wyre-ai/inforcer-mcp:v1.1.3"
],
"env": {
"INFORCER_REGION": "<YOUR_INFORCER_REGION>",
"INFORCER_API_KEY": "<YOUR_INFORCER_API_KEY>",
"MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
"AUTH_MODE": "<YOUR_AUTH_MODE>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}Cline
{
"mcpServers": {
"inforcer-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"INFORCER_REGION=<YOUR_INFORCER_REGION>",
"-e",
"INFORCER_API_KEY=<YOUR_INFORCER_API_KEY>",
"-e",
"MCP_TRANSPORT=<YOUR_MCP_TRANSPORT>",
"-e",
"AUTH_MODE=<YOUR_AUTH_MODE>",
"-e",
"LOG_LEVEL=<YOUR_LOG_LEVEL>",
"ghcr.io/wyre-ai/inforcer-mcp:v1.1.3"
],
"env": {
"INFORCER_REGION": "<YOUR_INFORCER_REGION>",
"INFORCER_API_KEY": "<YOUR_INFORCER_API_KEY>",
"MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
"AUTH_MODE": "<YOUR_AUTH_MODE>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}VS Code
{
"servers": {
"inforcer-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"INFORCER_REGION=<YOUR_INFORCER_REGION>",
"-e",
"INFORCER_API_KEY=<YOUR_INFORCER_API_KEY>",
"-e",
"MCP_TRANSPORT=<YOUR_MCP_TRANSPORT>",
"-e",
"AUTH_MODE=<YOUR_AUTH_MODE>",
"-e",
"LOG_LEVEL=<YOUR_LOG_LEVEL>",
"ghcr.io/wyre-ai/inforcer-mcp:v1.1.3"
],
"env": {
"INFORCER_REGION": "<YOUR_INFORCER_REGION>",
"INFORCER_API_KEY": "<YOUR_INFORCER_API_KEY>",
"MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
"AUTH_MODE": "<YOUR_AUTH_MODE>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"inforcer-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"INFORCER_REGION=<YOUR_INFORCER_REGION>",
"-e",
"INFORCER_API_KEY=<YOUR_INFORCER_API_KEY>",
"-e",
"MCP_TRANSPORT=<YOUR_MCP_TRANSPORT>",
"-e",
"AUTH_MODE=<YOUR_AUTH_MODE>",
"-e",
"LOG_LEVEL=<YOUR_LOG_LEVEL>",
"ghcr.io/wyre-ai/inforcer-mcp:v1.1.3"
],
"env": {
"INFORCER_REGION": "<YOUR_INFORCER_REGION>",
"INFORCER_API_KEY": "<YOUR_INFORCER_API_KEY>",
"MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
"AUTH_MODE": "<YOUR_AUTH_MODE>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}Let your agent find its tools
Find servers like Inforcer MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.