{
  "markdown": "# Kaseya VSA MCP Server\n\n[![Release](https://github.com/WYRE-AI/kaseya-vsa-mcp/actions/workflows/release.yml/badge.svg)](https://github.com/WYRE-AI/kaseya-vsa-mcp/actions/workflows/release.yml)\n[![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n\nModel Context Protocol (MCP) server for the Kaseya VSA RMM API.\nExposes managed endpoints, software / hardware inventory, patch state, agent\nprocedures, alarms, Service Desk tickets, organizations, and machine groups\nto AI assistants.\n\n## Tools\n\n| Tool | Description |\n|------|-------------|\n| `kaseya_vsa_list_agents` | List managed endpoints (agents). Optional `$filter`. |\n| `kaseya_vsa_get_agent` | Get an agent's details by ID (renders as an interactive card in MCP Apps hosts). |\n| `kaseya_vsa_get_software_inventory` | Installed software for an agent. |\n| `kaseya_vsa_get_hardware_inventory` | Hardware audit for an agent. |\n| `kaseya_vsa_get_patch_status` | Pending and installed patches for an agent. |\n| `kaseya_vsa_deploy_patches_now` | Force a patch deploy on an agent (destructive — confirmation required). |\n| `kaseya_vsa_list_procedures` | Agent procedures available to run. |\n| `kaseya_vsa_run_procedure` | Execute a procedure on an agent (destructive — confirmation required). |\n| `kaseya_vsa_list_alarms` | Open alarms (optional state filter; date-window elicitation if missing). |\n| `kaseya_vsa_list_tickets` | Service Desk tickets (returns a friendly message if SD module isn't enabled). |\n| `kaseya_vsa_list_organizations` | Tenant organizations. |\n| `kaseya_vsa_list_machine_groups` | Machine group hierarchy. |\n\nWhen the user omits required filters or runs a destructive action, the server\nuses MCP elicitation to prompt for choices or confirm.\n\n### Interactive device card (MCP Apps)\n\n`kaseya_vsa_get_agent` renders as a read-only interactive device card in MCP\nApps hosts (Claude Desktop/web), showing the endpoint's name, online status,\norganization, machine group, OS, IP address, and last check-in. The card is\nneutral by default, brandable via `window.__BRAND__` injection or\n`MCP_BRAND_*` env vars (`MCP_BRAND_NAME`, `MCP_BRAND_LOGO_URL`,\n`MCP_BRAND_PRIMARY_COLOR`, `MCP_BRAND_ACCENT_COLOR`, `MCP_BRAND_BG`,\n`MCP_BRAND_TEXT`) applied at serve time. Plain-JSON behavior is unchanged in\nother hosts. After editing `ui/`, regenerate the embedded bundle with\n`npm run build:ui`.\n\n## Configuration\n\n### Environment-variable mode (default)\n\n| Variable | Required | Description |\n|----------|----------|-------------|\n| `KASEYA_VSA_TENANT_URL` | yes | Full base URL incl. `/api/v1.0` |\n| `KASEYA_VSA_USERNAME` | one of | Local-auth username |\n| `KASEYA_VSA_PASSWORD` | one of | Local-auth password (secret) |\n| `KASEYA_VSA_K1_TOKEN` | one of | Kaseya One SSO token (alternative to username + password) |\n| `MCP_TRANSPORT` | no | `stdio` (default) or `http` |\n| `MCP_HTTP_PORT` | no | HTTP listen port (default `8080`) |\n| `AUTH_MODE` | no | `env` (default) or `gateway` |\n\nEither the username + password pair OR the `KASEYA_VSA_K1_TOKEN` is required.\n\n### Gateway mode\n\nWhen deployed behind the WYRE MCP Gateway, set `AUTH_MODE=gateway` and the\nserver will read credentials from per-request HTTP headers:\n\n- `X-Kaseya-VSA-Tenant-Url` (required)\n- `X-Kaseya-VSA-Username` (with password)\n- `X-Kaseya-VSA-Password` (with username)\n- `X-Kaseya-VSA-K1-Token` (alternative to username + password)\n\nEach request creates a fresh server instance with isolated credentials — no\ncross-tenant `process.env` pollution.\n\n## Local development\n\n```bash\nnpm install\nnpm run build\nKASEYA_VSA_TENANT_URL=https://vsa.example.com/api/v1.0 \\\n  KASEYA_VSA_USERNAME=... \\\n  KASEYA_VSA_PASSWORD=... \\\n  npm start\n```\n\nRun as HTTP for testing:\n\n```bash\nMCP_TRANSPORT=http npm start\ncurl http://localhost:8080/health\n```\n\n## Docker\n\n```bash\ndocker build -t kaseya-vsa-mcp .\ndocker run --rm -p 8080:8080 \\\n  -e KASEYA_VSA_TENANT_URL=https://vsa.example.com/api/v1.0 \\\n  -e KASEYA_VSA_USERNAME=... \\\n  -e KASEYA_VSA_PASSWORD=... \\\n  kaseya-vsa-mcp\n```\n\n## License\n\nApache-2.0\n",
  "bytes": 4093,
  "sha": "65a973c5e5986384b09ef6b0a919fa91baf2d976f850f7cb006dec7b7bf76ec6",
  "repo_slug": "wyre-ai/kaseya-vsa-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_wyre_ai_kaseya_vsa_mcp_e6195531/readme"
}