CIPP MCP - Microsoft 365, Entra ID, Intune, Exchange, Defender, GDAP
io.github.Servosity/cipp-mcp
About CIPP MCP - Microsoft 365, Entra ID, Intune, Exchange, Defender, GDAP
CIPP MCP - Microsoft 365, Entra ID, Intune, Exchange, Defender, GDAP is an MCP server published by the GitHub account Servosity. MSP MCP for CIPP: Microsoft 365, Entra ID, Intune, Exchange, Defender and GDAP across all tenants
It runs on your own machine: your AI client starts it from the MCP bundle package cipp-mcp.mcpb at version 0.1.13.
It asks for 2 secrets: CIPP_API_KEY and CIPP_MCP_HTTP_TOKEN. Give it a key with the least access that still works.
It also needs CIPP_BASE_URL set before it starts.
Version 0.1.13 was published on 27 October 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 7 automated checks on registry metadata: 4 pass, 0 warn, 0 fail, 3 info. How we check.
What it asks for
| Variable | Required | Secret | Description |
|---|---|---|---|
CIPP_API_KEY | Yes | Yes | Set the CIPP_API_KEY credential for the CIPP MCP server. |
CIPP_BASE_URL | Yes | No | Base URL of your self-hosted CIPP instance's API, e.g. https://cipp.example.com/api. The shipped default points at an example host, so until you set this the CLI is not talking to your tenant at all. |
CIPP_NO_CONFIG_WRITE | No | No | Set to 1 to keep credentials off disk: auth login and auth set-token refuse and nothing is written, so supply the bearer token in CIPP_API_KEY. Leave blank for the default, which keeps the minted token in the credentials file. |
CIPP_USER_AGENT | No | No | Overrides the User-Agent the CLI sends on CIPP requests. Leave blank to use the CLI's own built-in User-Agent. |
CIPP_MCP_READ_ONLY | No | No | Optional. Set to exactly 1 to drop every MCP tool not marked read-only, cipp_execute included. Leave blank to allow writes, which run only after a preview the agent confirms. |
CIPP_NO_LOCAL_DATA | No | No | Optional. Set to exactly 1 to keep no local copy of CIPP data: reads go to the API, the response cache is off, and fanout --save and --resume refuse to run. Leave blank to keep the local store. |
CIPP_MCP_HTTP_TOKEN | No | Yes | Required only when running the MCP server with --transport http (a remote/hosted deployment); callers must send a matching Authorization: Bearer header. Not needed for the default local stdio transport Claude Desktop uses. |
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/servosity/msp-skills |
| Version pinned | Pass | Every package has an explicit version |
| Secrets requested | Info | Asks for 2 secrets: CIPP_API_KEY, CIPP_MCP_HTTP_TOKEN |
| Known package registry | Pass | All packages come from npm, PyPI, OCI, NuGet or MCPB |
| Namespace ownership | Info | Name verified via GitHub account Servosity |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Code red flags | Info | Package could not be read (too large) |
Popularity & health: 67 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
14 forks, 379 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | io.github.Servosity/cipp-mcp |
|---|---|
| Publisher | GitHub account Servosity |
| How the name is verified | Name verified via GitHub account Servosity. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | mcpb https://github.com/Servosity/msp-skills/releases/download/cipp-v0.1.13/cipp-mcp.mcpb 0.1.13 (stdio) |
| Version | 0.1.13 |
| Published | |
| Last updated | |
| Source repository | https://github.com/servosity/msp-skills |
| Website | None linked |
| Category | Other (assigned by keyword rule, not by hand) |
Related servers in Other
MSPStuff Switchboard3/3Hosted MCP servers for MSP tools: ConnectWise, NinjaOne, Microsoft…- Avanan MSP (Legacy SmartAPI)4/4MCP server for the Avanan MSP SmartAPI — manage child MSPs, users,…
Microsoft MCP Server for Enterprise3/3Official Microsoft MCP Server to query Microsoft Entra data using…- PnP PowerShell4/4Manage Microsoft 365 in natural language with PnP PowerShell and…
- iris7/7Microsoft 365 mail MCP: reads mail, drafts into Outlook; sending is…
- cli-microsoft365-mcp-server7/7MCP server for CLI for Microsoft 365 to manage your tenant using…