WatchGuard MCP
io.github.Servosity/watchguard-mcp
About WatchGuard MCP
WatchGuard MCP is an MCP server published by the GitHub account Servosity. WatchGuard Cloud Firebox, Endpoint Security, ThreatSync, NDR and AuthPoint APIs for every customer
It runs on your own machine: your AI client starts it from the MCP bundle package watchguard-mcp.mcpb at version 0.1.3.
It asks for 4 secrets: WATCHGUARD_CLIENT_ID, WATCHGUARD_CLIENT_SECRET, WATCHGUARD_API_KEY and WATCHGUARD_MCP_HTTP_TOKEN. Give it a key with the least access that still works.
It also needs WATCHGUARD_ACCOUNT_ID set before it starts.
Version 0.1.3 was published on 23 October 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 7 automated checks on registry metadata: 4 pass, 1 warn, 0 fail, 2 info. How we check.
What it asks for
| Variable | Required | Secret | Description |
|---|---|---|---|
WATCHGUARD_CLIENT_ID | Yes | Yes | WatchGuard Cloud API Access ID (read-write or read-only). |
WATCHGUARD_CLIENT_SECRET | Yes | Yes | Password for that Access ID. |
WATCHGUARD_API_KEY | Yes | Yes | WatchGuard Cloud API key (WatchGuard-API-Key header). |
WATCHGUARD_ACCOUNT_ID | Yes | No | Your WatchGuard Cloud account ID (ACC-... or WGC-...). |
WATCHGUARD_BASE_URL | No | No | Optional: region API base URL; default https://api.usa.cloud.watchguard.com (EMEA api.deu, APAC api.jpn). |
WATCHGUARD_TOKEN_URL | No | No | Optional: region OAuth token URL; default https://api.usa.cloud.watchguard.com/oauth/token. |
WATCHGUARD_AUDIENCE | No | No | Optional: a managed account's audience value; requests use that customer's token (not a security boundary). |
WATCHGUARD_OAUTH_SCOPE | No | No | Optional: OAuth scope to request; default api-access. |
WATCHGUARD_USER_AGENT | No | No | Optional: override the User-Agent the CLI sends. |
WATCHGUARD_MCP_READ_ONLY | No | No | Optional: set to 1 to run the MCP server read-only. |
WATCHGUARD_MCP_HTTP_TOKEN | No | Yes | Bearer token callers must present when the server runs with --transport http; not used by the stdio transport. |
PRINTING_PRESS_CLIENT_PROFILE | No | No | Not enforced by this connector (no tenant-gated profiles); leave unset. It does not limit which accounts a call can reach. |
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/servosity/msp-skills |
| Version pinned | Pass | Every package has an explicit version |
| Secrets requested | Warn | Asks for 4 secrets: WATCHGUARD_CLIENT_ID, WATCHGUARD_CLIENT_SECRET, WATCHGUARD_API_KEY, WATCHGUARD_MCP_HTTP_TOKEN |
| Known package registry | Pass | All packages come from npm, PyPI, OCI, NuGet or MCPB |
| Namespace ownership | Info | Name verified via GitHub account Servosity |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Code red flags | Info | Package could not be read (too large) |
Popularity & health: 63 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
14 forks, 379 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | io.github.Servosity/watchguard-mcp |
|---|---|
| Publisher | GitHub account Servosity |
| How the name is verified | Name verified via GitHub account Servosity. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | mcpb https://github.com/Servosity/msp-skills/releases/download/watchguard-v0.1.3/watchguard-mcp.mcpb 0.1.3 (stdio) |
| Version | 0.1.3 |
| Published | |
| Last updated | |
| Source repository | https://github.com/servosity/msp-skills |
| Website | None linked |
| Category | Security (assigned by keyword rule, not by hand) |
Related servers in Security
- sophos-central-mcp7/7MCP server for Sophos Central — endpoint security, XDR/MDR, and…
- nemesis-shield7/7Positive-security for apps, APIs, LLMs and edge, plus fraud scoring…
- GoldBean MCP Server7/749 pay-per-use APIs for AI agents via x402. AI, crypto, DeFi,…
- apimesh7/774 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP…
- Bright Security3/3AI-powered application security testing — scan APIs, discover…
- rustsdcmcp4/4Juniper Security Director Cloud MCP server: scoped, audited change…