{
  "markdown": "# Ironscales MCP Server\n\n[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n[![Node.js](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen.svg)](https://nodejs.org/)\n\nA Model Context Protocol (MCP) server for Ironscales email security. Enables AI assistants to investigate phishing incidents, manage email classification, execute remediations, and view security statistics.\n\nThis is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that connects Claude (or any MCP-compatible AI) to your Ironscales environment.\n\n> **Part of the [MSP Claude Plugins](https://github.com/WYRE-AI) ecosystem** — a growing suite of AI integrations for the MSP stack. Built by MSPs, for MSPs.\n\n## Interactive Incident Card (MCP Apps)\n\n`ironscales_incidents_get` renders as an interactive card in MCP Apps hosts\n(Claude Desktop/web) showing the phishing incident's subject, status, severity,\nsender, affected recipients, and threat indicators; plain-JSON behavior is\nunchanged in other hosts. The card is read-only — remediation stays with the\nmodel-driven remediation tools. It is neutral by default and brandable via\n`window.__BRAND__` injection or `MCP_BRAND_*` env vars (`MCP_BRAND_NAME`,\n`MCP_BRAND_LOGO_URL`, `MCP_BRAND_PRIMARY_COLOR`, `MCP_BRAND_ACCENT_COLOR`,\n`MCP_BRAND_BG`, `MCP_BRAND_TEXT`) — no rebuild needed.\n\n## Installation\n\n```bash\nnpm install @wyre-ai/ironscales-mcp\n```\n\n## Configuration\n\nSet the following environment variables:\n\n| Variable | Required | Description |\n|----------|----------|-------------|\n| `IRONSCALES_API_KEY` | Yes | Your Ironscales API key |\n| `IRONSCALES_COMPANY_ID` | Yes | Your Ironscales company ID |\n| `MCP_TRANSPORT` | No | Transport mode: stdio (default) or http |\n\n## Usage\n\n### Running with Claude Desktop\n\nAdd to your Claude Desktop `claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"ironscales-mcp\": {\n      \"command\": \"npx\",\n      \"args\": [\"@wyre-ai/ironscales-mcp\"],\n      \"env\": {\n        \"IRONSCALES_API_KEY\": \"your-ironscales-api-key\"\n        \"IRONSCALES_COMPANY_ID\": \"your-ironscales-company-id\"\n      }\n    }\n  }\n}\n```\n\n### Running with Claude Code (CLI)\n\n```bash\nclaude mcp add ironscales-mcp \\\n  -e IRONSCALES_API_KEY=your-value \\\n  -e IRONSCALES_COMPANY_ID=your-value \\\n  -- npx -y @wyre-ai/ironscales-mcp\n```\n\n### Docker\n\n```bash\ndocker build -t ironscales-mcp .\ndocker run \\\n  -e IRONSCALES_API_KEY=your-value \\\n  -e IRONSCALES_COMPANY_ID=your-value \\\n  -p 8080:8080 ironscales-mcp\n```\n\n## Available Domains\n\n### Allowlist\nManage email allowlists and blocklists\n\n### Email\nEmail investigation and classification\n\n### Incidents\nPhishing incident management and triage\n\n### Remediation\nExecute email remediations and quarantine\n\n### Stats\nSecurity statistics and reporting\n\n\n## Development\n\n```bash\n# Clone the repository\ngit clone https://github.com/WYRE-AI/ironscales-mcp.git\ncd ironscales-mcp\n\n# Install dependencies\nnpm install\n\n# Build\nnpm run build\n\n# Run tests\nnpm test\n```\n\n## Contributing\n\nContributions are welcome! Please see [CONTRIBUTING.md](CONTRIBUTING.md) if present, or open an issue to discuss changes.\n\n## License\n\nLicensed under the Apache License, Version 2.0. See [LICENSE](LICENSE) for details.\n",
  "bytes": 3267,
  "sha": "1b2613bc202616bcbaffe53ee04e87f49bf3dcde45c7fdc9f78510c739900c98",
  "repo_slug": "wyre-technology/ironscales-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_wyre_technology_ironscales_mcp_b03a07d5/readme"
}