Sophos Central MCP Server
sophos-central-mcp-server
npm
v0.5.0
Published by an unidentified publisher — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
MCP server for Sophos Central API - SOC monitoring, endpoint management, admin automation, and XDR investigation
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 8 = 92. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: sophos_download_firewall_backup → sophos_get_memory_dump_status → sophos_release_quarantine_message. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow sophos_download_firewall_backup → sophos_get_memory_dump_status → sophos_release_quarantine_message
Tools 200
Each tool and what it can reach — statically extracted from the published source.
sophos_download_firewall_backupingests untrusted inputsophos_download_post_delivery_attachmentingests untrusted inputsophos_download_quarantine_attachmentingests untrusted inputsophos_export_firewall_configingests untrusted inputsophos_get_detection_groups_runingests untrusted inputsophos_get_detections_runingests untrusted inputsophos_get_firewall_import_export_transactioningests untrusted inputsophos_get_installer_downloadingests untrusted inputsophos_get_live_discover_runingests untrusted inputsophos_get_memory_dump_statusreads sensitive data
Show 190 more tools ↓
sophos_list_account_healthingests untrusted inputsophos_list_installer_downloadsingests untrusted inputsophos_release_quarantine_messagenetwork egresssophos_request_memory_dumpreads sensitive datasophos_run_live_discover_queryreads sensitive datasophos_acknowledge_alertno sensitive capabilitysophos_add_admin_role_assignmentno sensitive capabilitysophos_add_allowed_itemno sensitive capabilitysophos_add_blocked_addressno sensitive capabilitysophos_add_blocked_itemno sensitive capabilitysophos_add_endpoints_to_groupno sensitive capabilitysophos_add_exclusionno sensitive capabilitysophos_add_exploit_mitigation_appno sensitive capabilitysophos_add_ips_exclusionno sensitive capabilitysophos_add_isolation_exclusionno sensitive capabilitysophos_add_local_siteno sensitive capabilitysophos_add_mailbox_aliasno sensitive capabilitysophos_add_mailbox_delegateno sensitive capabilitysophos_add_users_to_groupno sensitive capabilitysophos_bulk_create_mailboxesno sensitive capabilitysophos_bulk_delete_endpointsno sensitive capabilitysophos_bulk_isolate_endpointsno sensitive capabilitysophos_cancel_firmware_upgradeno sensitive capabilitysophos_check_firmware_upgradeno sensitive capabilitysophos_clawback_messageno sensitive capabilitysophos_create_access_tokenno sensitive capabilitysophos_create_adminno sensitive capabilitysophos_create_caseno sensitive capabilitysophos_create_cloud_security_profileno sensitive capabilitysophos_create_dns_locationno sensitive capabilitysophos_create_endpoint_groupno sensitive capabilitysophos_create_firewall_groupno sensitive capabilitysophos_create_mailboxno sensitive capabilitysophos_create_migrationno sensitive capabilitysophos_create_roleno sensitive capabilitysophos_create_userno sensitive capabilitysophos_create_user_groupno sensitive capabilitysophos_delete_adminno sensitive capabilitysophos_delete_admin_role_assignmentno sensitive capabilitysophos_delete_allowed_itemno sensitive capabilitysophos_delete_blocked_addressno sensitive capabilitysophos_delete_blocked_itemno sensitive capabilitysophos_delete_caseno sensitive capabilitysophos_delete_cloud_security_profileno sensitive capabilitysophos_delete_dns_locationno sensitive capabilitysophos_delete_endpointno sensitive capabilitysophos_delete_endpoint_groupno sensitive capabilitysophos_delete_exclusionno sensitive capabilitysophos_delete_firewallno sensitive capabilitysophos_delete_firewall_groupno sensitive capabilitysophos_delete_ips_exclusionno sensitive capabilitysophos_delete_isolation_exclusionno sensitive capabilitysophos_delete_local_siteno sensitive capabilitysophos_delete_mailboxno sensitive capabilitysophos_delete_mailbox_aliasno sensitive capabilitysophos_delete_mailbox_delegateno sensitive capabilitysophos_delete_migrationno sensitive capabilitysophos_delete_post_delivery_messageno sensitive capabilitysophos_delete_quarantine_messageno sensitive capabilitysophos_delete_roleno sensitive capabilitysophos_delete_userno sensitive capabilitysophos_delete_user_groupno sensitive capabilitysophos_firewall_actionno sensitive capabilitysophos_get_account_healthno sensitive capabilitysophos_get_adaptive_attack_protectionno sensitive capabilitysophos_get_adminno sensitive capabilitysophos_get_admin_role_assignmentno sensitive capabilitysophos_get_alertno sensitive capabilitysophos_get_ba_partner_levelsno sensitive capabilitysophos_get_ba_pricingno sensitive capabilitysophos_get_ba_quoteno sensitive capabilitysophos_get_caseno sensitive capabilitysophos_get_case_detectionno sensitive capabilitysophos_get_case_mitre_summaryno sensitive capabilitysophos_get_clawback_statusno sensitive capabilitysophos_get_cloud_security_profileno sensitive capabilitysophos_get_detected_exploitno sensitive capabilitysophos_get_detection_groups_resultsno sensitive capabilitysophos_get_detections_resultsno sensitive capabilitysophos_get_dns_locationno sensitive capabilitysophos_get_endpointno sensitive capabilitysophos_get_endpoint_groupno sensitive capabilitysophos_get_endpoint_isolation_statusno sensitive capabilitysophos_get_exploit_mitigation_appno sensitive capabilitysophos_get_exploit_mitigation_categoryno sensitive capabilitysophos_get_firewall_groupno sensitive capabilitysophos_get_firewall_sync_statusno sensitive capabilitysophos_get_firewall_transactionno sensitive capabilitysophos_get_forensic_log_statusno sensitive capabilitysophos_get_global_tamper_protectionno sensitive capabilitysophos_get_live_discover_resultsno sensitive capabilitysophos_get_lockdown_settingsno sensitive capabilitysophos_get_mailboxno sensitive capabilitysophos_get_migrationno sensitive capabilitysophos_get_mobile_auto_enrollmentno sensitive capabilitysophos_get_post_delivery_attachmentsno sensitive capabilitysophos_get_quarantine_attachmentsno sensitive capabilitysophos_get_quarantine_urlsno sensitive capabilitysophos_get_roleno sensitive capabilitysophos_get_tamper_protectionno sensitive capabilitysophos_get_threat_feed_settingsno sensitive capabilitysophos_get_tls_decryption_settingsno sensitive capabilitysophos_get_userno sensitive capabilitysophos_get_user_groupno sensitive capabilitysophos_import_firewall_configno sensitive capabilitysophos_isolate_endpointno sensitive capabilitysophos_list_access_tokensno sensitive capabilitysophos_list_admin_role_assignmentsno sensitive capabilitysophos_list_adminsno sensitive capabilitysophos_list_alertsno sensitive capabilitysophos_list_allowed_itemsno sensitive capabilitysophos_list_audit_eventsno sensitive capabilitysophos_list_ba_quotesno sensitive capabilitysophos_list_blocked_addressesno sensitive capabilitysophos_list_blocked_itemsno sensitive capabilitysophos_list_case_detectionsno sensitive capabilitysophos_list_case_impacted_entitiesno sensitive capabilitysophos_list_casesno sensitive capabilitysophos_list_cloud_security_profilesno sensitive capabilitysophos_list_detected_exploitsno sensitive capabilitysophos_list_dns_locationsno sensitive capabilitysophos_list_endpoint_groupsno sensitive capabilitysophos_list_endpointsno sensitive capabilitysophos_list_exclusionsno sensitive capabilitysophos_list_exploit_mitigation_appsno sensitive capabilitysophos_list_exploit_mitigation_categoriesno sensitive capabilitysophos_list_firewall_groupsno sensitive capabilitysophos_list_firewall_licensesno sensitive capabilitysophos_list_firewallsno sensitive capabilitysophos_list_ips_exclusionsno sensitive capabilitysophos_list_isolation_exclusionsno sensitive capabilitysophos_list_licensesno sensitive capabilitysophos_list_live_discover_queriesno sensitive capabilitysophos_list_local_sitesno sensitive capabilitysophos_list_mailbox_aliasesno sensitive capabilitysophos_list_mailbox_delegatesno sensitive capabilitysophos_list_mailboxesno sensitive capabilitysophos_list_migration_endpointsno sensitive capabilitysophos_list_migrationsno sensitive capabilitysophos_list_permission_setsno sensitive capabilitysophos_list_recommended_packagesno sensitive capabilitysophos_list_rolesno sensitive capabilitysophos_list_static_packagesno sensitive capabilitysophos_list_user_group_endpointsno sensitive capabilitysophos_list_user_group_membersno sensitive capabilitysophos_list_user_group_policiesno sensitive capabilitysophos_list_user_groupsno sensitive capabilitysophos_list_usersno sensitive capabilitysophos_list_web_control_categoriesno sensitive capabilitysophos_partner_gap_analysisno sensitive capabilitysophos_preview_post_delivery_messageno sensitive capabilitysophos_preview_quarantine_messageno sensitive capabilitysophos_reattach_quarantine_attachmentsno sensitive capabilitysophos_release_endpointno sensitive capabilitysophos_release_post_delivery_messageno sensitive capabilitysophos_remove_endpoint_from_groupno sensitive capabilitysophos_remove_user_from_groupno sensitive capabilitysophos_request_forensic_logsno sensitive capabilitysophos_reset_admin_passwordno sensitive capabilitysophos_revoke_access_tokenno sensitive capabilitysophos_run_detection_groups_queryno sensitive capabilitysophos_run_detections_queryno sensitive capabilitysophos_scan_endpointno sensitive capabilitysophos_search_alertsno sensitive capabilitysophos_search_post_delivery_quarantineno sensitive capabilitysophos_search_quarantineno sensitive capabilitysophos_search_threat_feed_indicatorsno sensitive capabilitysophos_start_firmware_upgradeno sensitive capabilitysophos_strip_quarantine_attachmentsno sensitive capabilitysophos_toggle_adaptive_attack_protectionno sensitive capabilitysophos_toggle_tamper_protectionno sensitive capabilitysophos_trigger_update_checkno sensitive capabilitysophos_update_access_tokenno sensitive capabilitysophos_update_caseno sensitive capabilitysophos_update_cloud_security_profileno sensitive capabilitysophos_update_dns_locationno sensitive capabilitysophos_update_endpoint_groupno sensitive capabilitysophos_update_exploit_mitigation_appno sensitive capabilitysophos_update_firewallno sensitive capabilitysophos_update_firewall_groupno sensitive capabilitysophos_update_global_tamper_protectionno sensitive capabilitysophos_update_local_siteno sensitive capabilitysophos_update_lockdown_settingsno sensitive capabilitysophos_update_mailboxno sensitive capabilitysophos_update_mobile_auto_enrollmentno sensitive capabilitysophos_update_roleno sensitive capabilitysophos_update_threat_feed_settingsno sensitive capabilitysophos_update_tls_decryption_settingsno sensitive capabilitysophos_update_userno sensitive capabilitysophos_update_user_groupno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 4
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.5.0 latest |
A 92/100 | 1 | 1.13.0 | 2026-09-07 |
v0.4.2 |
A 92/100 | 1 | 1.13.0 | 2026-09-06 |
v0.4.0 |
A 92/100 | 1 | 1.13.0 | 2026-09-01 |
v0.2.12 |
A 92/100 | 1 | 1.13.0 | 2026-08-29 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan sophos-central-mcp-server --onlineMore in Security & Testing
The Stripe Agent Toolkit enables popular agent frameworks including LangChain and Vercel's AI SDK to integrate with Stripe APIs through function calling.
MCP (Model Context Protocol) server for AgentGate. Enables Claude and other MCP-compatible AI assistants to request approvals.
Scan any website for AI agent readiness, payment protocols, and discovery endpoints
MCP server for aigently security guardrails — reads static catalog-data JSON, zero API dependency
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.