WatchGuard MCP

WatchGuard MCP is a community-driven Model Context Protocol server that integrates WatchGuard Cloud Firebox, Endpoint Security, ThreatSync, NDR, and AuthPoint APIs. It allows agents to query security data and manage endpoints locally, ensuring data privacy by keeping information on the user's network rather than in external SaaS systems.

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

Community listingLocal stdioSource reviewed; not executedPublished by Servosity

Vendor documentation

What you can do with it

Query WatchGuard Cloud Firebox status
Check Endpoint Security alerts
Retrieve ThreatSync data
Manage AuthPoint authentication

Source and maintenance

Community listingRegistry 0.1.3

mcp-registry: io.github.Servosity/watchguard-mcp@0.1.3 Source repository

Maintenance checked: Oct 31, 2026, 10:27 PM UTC

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

https://github.com/Servosity/msp-skills/releases/download/watchguard-v0.1.3/watchguard-mcp.mcpb 0.1.3

mcpbSHA-256 supplied

https://github.com/Servosity/msp-skills/releases/download/watchguard-v0.1.3/watchguard-mcp.mcpb package definition

{
  "version": "0.1.3",
  "transport": "stdio",
  "fileSha256": "ca105f223be3d83c408fd320cb4f184f0a0ef49d54df85435992561e2fc21f1a",
  "identifier": "https://github.com/Servosity/msp-skills/releases/download/watchguard-v0.1.3/watchguard-mcp.mcpb",
  "registryType": "mcpb",
  "environmentVariables": [
    {
      "name": "WATCHGUARD_CLIENT_ID",
      "isRequired": true,
      "description": "WatchGuard Cloud API Access ID (read-write or read-only)."
    },
    {
      "name": "WATCHGUARD_CLIENT_SECRET",
      "isRequired": true,
      "description": "Password for that Access ID."
    },
    {
      "name": "WATCHGUARD_API_KEY",
      "isRequired": true,
      "description": "WatchGuard Cloud API key (WatchGuard-API-Key header)."
    },
    {
      "name": "WATCHGUARD_ACCOUNT_ID",
      "isRequired": true,
      "description": "Your WatchGuard Cloud account ID (ACC-... or WGC-...)."
    },
    {
      "name": "WATCHGUARD_BASE_URL",
      "description": "Optional: region API base URL; default https://api.usa.cloud.watchguard.com (EMEA api.deu, APAC api.jpn)."
    },
    {
      "name": "WATCHGUARD_TOKEN_URL",
      "description": "Optional: region OAuth token URL; default https://api.usa.cloud.watchguard.com/oauth/token."
    },
    {
      "name": "WATCHGUARD_AUDIENCE",
      "description": "Optional: a managed account's audience value; requests use that customer's token (not a security boundary)."
    },
    {
      "name": "WATCHGUARD_OAUTH_SCOPE",
      "description": "Optional: OAuth scope to request; default api-access."
    },
    {
      "name": "WATCHGUARD_USER_AGENT",
      "description": "Optional: override the User-Agent the CLI sends."
    },
    {
      "name": "WATCHGUARD_MCP_READ_ONLY",
      "default": "1",
      "description": "Optional: set to 1 to run the MCP server read-only."
    },
    {
      "name": "WATCHGUARD_MCP_HTTP_TOKEN",
      "description": "Bearer token callers must present when the server runs with --transport http; not used by the stdio transport."
    },
    {
      "name": "PRINTING_PRESS_CLIENT_PROFILE",
      "description": "Not enforced by this connector (no tenant-gated profiles); leave unset. It does not limit which accounts a call can reach."
    }
  ]
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

No tool definitions available.

Let your agent find its tools

Find servers like WatchGuard MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows

See all 3,732