Sophos (rijul170) MCP Server
@rijul170/sophos-mcp
npm
v1.1.0
Published by @rijul170 — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server for Sophos Central MSSP multi-tenant management via XDR/MDR APIs
Trust
A · 96/100
Adoption risk for you: the threat score, then adjusted down for blast radius, publisher verification and how much the scan could see. Deterministic; every point is auditable.
Capability
Moderate
Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.
Coverage
Source
How much the scan could actually inspect. Shallow coverage is stated, never hidden.
A
Why this grade
threat 100 − adoption risk = 96/100
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
✓ No findings. The scan raised nothing on this surface — see Coverage for how deep it could look.
Tools 200
Each tool and what it can reach — statically extracted from the published source.
sophos_download_post_delivery_quarantine_attachmentsingests untrusted inputsophos_download_quarantine_attachmentsingests untrusted inputsophos_get_installer_downloadsingests untrusted inputsophos_get_memory_dump_statusreads sensitive datasophos_get_post_delivery_quarantine_download_statusingests untrusted inputsophos_get_quarantine_download_statusingests untrusted inputsophos_request_memory_dumpreads sensitive datasophos_run_live_queryreads sensitive datasophos_accept_migrationno sensitive capabilitysophos_acknowledge_alertno sensitive capability
Show 190 more tools ↓
sophos_add_endpoints_to_groupno sensitive capabilitysophos_add_user_to_groupsno sensitive capabilitysophos_add_users_to_groupno sensitive capabilitysophos_apply_firmware_upgradeno sensitive capabilitysophos_approve_firewallno sensitive capabilitysophos_authenticateno sensitive capabilitysophos_block_addresses_bulkno sensitive capabilitysophos_bulk_add_mailboxesno sensitive capabilitysophos_bulk_delete_endpointsno sensitive capabilitysophos_bulk_delete_mailboxesno sensitive capabilitysophos_bulk_isolate_endpointsno sensitive capabilitysophos_cancel_firmware_upgradeno sensitive capabilitysophos_cancel_live_query_runno sensitive capabilitysophos_check_firmware_upgradesno sensitive capabilitysophos_clawback_emailno sensitive capabilitysophos_create_account_access_tokenno sensitive capabilitysophos_create_allowed_itemno sensitive capabilitysophos_create_blocked_itemno sensitive capabilitysophos_create_caseno sensitive capabilitysophos_create_cloud_security_profileno sensitive capabilitysophos_create_endpoint_groupno sensitive capabilitysophos_create_exploit_mitigation_appno sensitive capabilitysophos_create_firewall_groupno sensitive capabilitysophos_create_ips_exclusionno sensitive capabilitysophos_create_isolation_exclusionno sensitive capabilitysophos_create_mailboxno sensitive capabilitysophos_create_mdr_threat_feed_indicatorsno sensitive capabilitysophos_create_userno sensitive capabilitysophos_create_user_groupno sensitive capabilitysophos_deisolate_endpointno sensitive capabilitysophos_delete_all_mdr_threat_feed_indicatorsno sensitive capabilitysophos_delete_allowed_itemno sensitive capabilitysophos_delete_blocked_itemno sensitive capabilitysophos_delete_caseno sensitive capabilitysophos_delete_cloud_security_profilesno sensitive capabilitysophos_delete_endpointno sensitive capabilitysophos_delete_endpoint_groupno sensitive capabilitysophos_delete_exploit_mitigation_appno sensitive capabilitysophos_delete_firewallno sensitive capabilitysophos_delete_firewall_groupno sensitive capabilitysophos_delete_ips_exclusionno sensitive capabilitysophos_delete_isolation_exclusionno sensitive capabilitysophos_delete_mailboxno sensitive capabilitysophos_delete_mdr_threat_feed_indicatorsno sensitive capabilitysophos_delete_post_delivery_quarantine_messagesno sensitive capabilitysophos_delete_quarantine_messagesno sensitive capabilitysophos_delete_userno sensitive capabilitysophos_delete_user_groupno sensitive capabilitysophos_dns_create_custom_domainno sensitive capabilitysophos_dns_create_locationno sensitive capabilitysophos_dns_create_policyno sensitive capabilitysophos_dns_delete_custom_domainno sensitive capabilitysophos_dns_delete_locationno sensitive capabilitysophos_dns_delete_policyno sensitive capabilitysophos_dns_get_custom_domainno sensitive capabilitysophos_dns_get_locationno sensitive capabilitysophos_dns_get_policyno sensitive capabilitysophos_dns_list_custom_domainsno sensitive capabilitysophos_dns_list_locationsno sensitive capabilitysophos_dns_list_policiesno sensitive capabilitysophos_dns_update_custom_domainno sensitive capabilitysophos_dns_update_locationno sensitive capabilitysophos_dns_update_policyno sensitive capabilitysophos_force_update_checkno sensitive capabilitysophos_get_account_healthno sensitive capabilitysophos_get_adaptive_attack_protectionno sensitive capabilitysophos_get_alertno sensitive capabilitysophos_get_allowed_itemno sensitive capabilitysophos_get_audit_eventno sensitive capabilitysophos_get_blocked_itemno sensitive capabilitysophos_get_caseno sensitive capabilitysophos_get_case_detectionno sensitive capabilitysophos_get_case_impacted_entitiesno sensitive capabilitysophos_get_case_mitre_summaryno sensitive capabilitysophos_get_clawback_statusno sensitive capabilitysophos_get_cloud_security_profileno sensitive capabilitysophos_get_detected_exploitno sensitive capabilitysophos_get_detection_countsno sensitive capabilitysophos_get_detections_group_query_statusno sensitive capabilitysophos_get_detections_group_resultsno sensitive capabilitysophos_get_detections_query_resultsno sensitive capabilitysophos_get_detections_query_statusno sensitive capabilitysophos_get_endpointno sensitive capabilitysophos_get_endpoint_groupno sensitive capabilitysophos_get_exploit_mitigation_appno sensitive capabilitysophos_get_firewall_groupno sensitive capabilitysophos_get_firewall_group_sync_statusno sensitive capabilitysophos_get_firewall_licensesno sensitive capabilitysophos_get_firewall_transactionno sensitive capabilitysophos_get_forensic_log_statusno sensitive capabilitysophos_get_health_scores_historyno sensitive capabilitysophos_get_ips_exclusionno sensitive capabilitysophos_get_isolation_exclusionno sensitive capabilitysophos_get_isolation_statusno sensitive capabilitysophos_get_licensesno sensitive capabilitysophos_get_live_query_categoryno sensitive capabilitysophos_get_live_query_endpoint_statusesno sensitive capabilitysophos_get_live_query_resultsno sensitive capabilitysophos_get_live_query_statusno sensitive capabilitysophos_get_mailboxno sensitive capabilitysophos_get_mdr_threat_feedno sensitive capabilitysophos_get_migration_jobno sensitive capabilitysophos_get_partner_levelno sensitive capabilitysophos_get_peripheralno sensitive capabilitysophos_get_quarantine_messageno sensitive capabilitysophos_get_quarantine_message_urlsno sensitive capabilitysophos_get_quoteno sensitive capabilitysophos_get_regional_health_scoresno sensitive capabilitysophos_get_saved_live_queryno sensitive capabilitysophos_get_tamper_protectionno sensitive capabilitysophos_get_userno sensitive capabilitysophos_get_user_groupno sensitive capabilitysophos_isolate_endpointno sensitive capabilitysophos_list_account_access_tokensno sensitive capabilitysophos_list_alertsno sensitive capabilitysophos_list_allowed_itemsno sensitive capabilitysophos_list_audit_eventsno sensitive capabilitysophos_list_blocked_addressesno sensitive capabilitysophos_list_blocked_itemsno sensitive capabilitysophos_list_case_detectionsno sensitive capabilitysophos_list_casesno sensitive capabilitysophos_list_cloud_security_default_contentsno sensitive capabilitysophos_list_cloud_security_profilesno sensitive capabilitysophos_list_detected_exploitsno sensitive capabilitysophos_list_endpoint_groupsno sensitive capabilitysophos_list_endpoint_migrationsno sensitive capabilitysophos_list_endpointsno sensitive capabilitysophos_list_exploit_mitigation_appsno sensitive capabilitysophos_list_exploit_mitigation_categoriesno sensitive capabilitysophos_list_firewall_groupsno sensitive capabilitysophos_list_firewallsno sensitive capabilitysophos_list_group_endpointsno sensitive capabilitysophos_list_ips_exclusionsno sensitive capabilitysophos_list_isolation_exclusionsno sensitive capabilitysophos_list_live_query_categoriesno sensitive capabilitysophos_list_live_query_runsno sensitive capabilitysophos_list_mailboxesno sensitive capabilitysophos_list_migration_endpointsno sensitive capabilitysophos_list_peripheralsno sensitive capabilitysophos_list_post_delivery_quarantine_attachmentsno sensitive capabilitysophos_list_quarantine_attachmentsno sensitive capabilitysophos_list_quotesno sensitive capabilitysophos_list_saved_live_queriesno sensitive capabilitysophos_list_user_groupsno sensitive capabilitysophos_list_usersno sensitive capabilitysophos_list_users_in_groupno sensitive capabilitysophos_manage_mailbox_aliasesno sensitive capabilitysophos_manage_mailbox_delegatesno sensitive capabilitysophos_manage_mailbox_dl_ownersno sensitive capabilitysophos_preview_post_delivery_quarantine_messageno sensitive capabilitysophos_preview_quarantine_messageno sensitive capabilitysophos_reattach_quarantine_attachmentsno sensitive capabilitysophos_release_post_delivery_quarantine_messagesno sensitive capabilitysophos_release_quarantine_messagesno sensitive capabilitysophos_remove_endpoints_from_groupno sensitive capabilitysophos_remove_user_from_groupsno sensitive capabilitysophos_remove_users_from_groupno sensitive capabilitysophos_request_bulk_sender_privilegeno sensitive capabilitysophos_request_forensic_logsno sensitive capabilitysophos_revoke_account_access_tokenno sensitive capabilitysophos_run_saved_live_queryno sensitive capabilitysophos_scan_endpointno sensitive capabilitysophos_search_alertsno sensitive capabilitysophos_search_mdr_threat_feed_indicatorsno sensitive capabilitysophos_search_post_delivery_quarantineno sensitive capabilitysophos_search_quarantineno sensitive capabilitysophos_set_tamper_protectionno sensitive capabilitysophos_snooze_health_checkno sensitive capabilitysophos_start_detections_group_queryno sensitive capabilitysophos_start_detections_queryno sensitive capabilitysophos_start_migrationno sensitive capabilitysophos_strip_quarantine_attachmentsno sensitive capabilitysophos_take_alert_actionno sensitive capabilitysophos_unblock_addresses_bulkno sensitive capabilitysophos_update_account_access_tokenno sensitive capabilitysophos_update_adaptive_attack_protectionno sensitive capabilitysophos_update_allowed_itemno sensitive capabilitysophos_update_caseno sensitive capabilitysophos_update_cloud_security_profile_nameno sensitive capabilitysophos_update_endpoint_groupno sensitive capabilitysophos_update_exploit_mitigation_appno sensitive capabilitysophos_update_firewallno sensitive capabilitysophos_update_firewall_groupno sensitive capabilitysophos_update_ips_exclusionno sensitive capabilitysophos_update_isolation_exclusionno sensitive capabilitysophos_update_mailboxno sensitive capabilitysophos_update_mdr_threat_feed_settingsno sensitive capabilitysophos_update_userno sensitive capabilitysophos_update_user_groupno sensitive capabilitysophos_whoamino sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.1.0 latest |
A 96/100 | 0 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @rijul170/sophos-mcp --onlineOther implementations of Sophos 1
Independent packages implementing the same tool, scanned with the same engine. Compare all 2 side by side →
More in Business & CRM
2Fin Tax
Remote
A
https://taxmcp.ai2fin.com/
Free public tax reference data — GST/VAT, income, company and capital-gains tax rules for 50+ countries.
Agentgate Ucp
Source verified
npm
A
@agentkitai/agentgate-ucp
The approval gate for unattended UCP buying agents — a policy/approval MCP proxy in front of a merchant's UCP checkout endpoint.
Autotask
Source verified
npm
A
@veeemlab/autotask-mcp
Autotask PSA MCP server. Generic entity query/get/create/update across the full REST API plus convenience tools for tickets, companies, contacts, projects, tasks and time entries. AI-safe with readonly mode and destructive-action confirmation. stdio + opt
B2c Dx
Official
npm
A
@salesforce/b2c-dx-mcp
MCP server for B2C Commerce developer experience tools
BizClaw Business Directory
Remote
A
https://bizclaw.xyz/mcp
Search, compare and contact real-world companies through a public MCP business directory.
Brreg
Source verified
npm
A
@nordio/brreg-mcp-server
Norwegian business register (Brønnøysundregistrene) as an MCP server — companies, roles, subunits and annual accounts, with the register's silent traps encoded as guards.