{
  "markdown": "# Proofpoint MCP Server\n\n[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n[![Node.js](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen.svg)](https://nodejs.org/)\n\nA Model Context Protocol (MCP) server for Proofpoint TAP and Essentials APIs. Enables AI assistants to investigate threats, trace emails, manage quarantine, access threat intelligence, and perform URL defense operations.\n\nThis is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that connects Claude (or any MCP-compatible AI) to your Proofpoint environment.\n\n> **Part of the [MSP Claude Plugins](https://github.com/WYRE-AI) ecosystem** — a growing suite of AI integrations for the MSP stack. Built by MSPs, for MSPs.\n\n## Installation\n\n```bash\nnpm install @wyre-ai/proofpoint-mcp\n```\n\n## Configuration\n\nSet the following environment variables:\n\n| Variable | Required | Description |\n|----------|----------|-------------|\n| `PROOFPOINT_SERVICE_PRINCIPAL` | Yes | Your Proofpoint TAP service principal |\n| `PROOFPOINT_SERVICE_SECRET` | Yes | Your Proofpoint TAP service secret |\n| `PROOFPOINT_BASE_URL` | No | Custom base URL (default: tap-api-v2.proofpoint.com) |\n| `MCP_TRANSPORT` | No | Transport mode: stdio (default) or http |\n\n## Usage\n\n### Running with Claude Desktop\n\nAdd to your Claude Desktop `claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"proofpoint-mcp\": {\n      \"command\": \"npx\",\n      \"args\": [\"@wyre-ai/proofpoint-mcp\"],\n      \"env\": {\n        \"PROOFPOINT_SERVICE_PRINCIPAL\": \"your-proofpoint-service-principal\"\n        \"PROOFPOINT_SERVICE_SECRET\": \"your-proofpoint-service-secret\"\n      }\n    }\n  }\n}\n```\n\n### Running with Claude Code (CLI)\n\n```bash\nclaude mcp add proofpoint-mcp \\\n  -e PROOFPOINT_SERVICE_PRINCIPAL=your-value \\\n  -e PROOFPOINT_SERVICE_SECRET=your-value \\\n  -- npx -y @wyre-ai/proofpoint-mcp\n```\n\n### Docker\n\n```bash\ndocker build -t proofpoint-mcp .\ndocker run \\\n  -e PROOFPOINT_SERVICE_PRINCIPAL=your-value \\\n  -e PROOFPOINT_SERVICE_SECRET=your-value \\\n  -p 8080:8080 proofpoint-mcp\n```\n\n## Features\n\n### Interactive Threat Card (MCP Apps)\n\n`proofpoint_threat_get_by_id` renders as an interactive, read-only card in\nMCP Apps hosts (Claude Desktop/web) showing the threat name, status,\ncategory, severity, and resolved actor / malware-family / campaign names;\nplain-JSON behavior is unchanged in other hosts. The card is neutral by\ndefault and brandable via `window.__BRAND__` injection or `MCP_BRAND_*` env\nvars (`MCP_BRAND_NAME`, `MCP_BRAND_LOGO_URL`, `MCP_BRAND_PRIMARY_COLOR`,\n`MCP_BRAND_ACCENT_COLOR`, `MCP_BRAND_BG`, `MCP_BRAND_TEXT`) — no rebuild\nneeded.\n\n## Available Domains\n\n### Dlp\nData loss prevention policies\n\n### Events\nSecurity event stream and SIEM export\n\n### Forensics\nForensic analysis of threats\n\n### People\nVery Attacked People (VAP) reporting\n\n### Policy\nEmail policy management\n\n### Quarantine\nEmail quarantine management\n\n### Reports\nSecurity reports and summaries\n\n### Smart Search\nAdvanced email search\n\n### Tap\nTargeted Attack Protection events and campaigns\n\n### Threat Intel\nThreat intelligence and indicators of compromise\n\n### Url Defense\nURL rewriting and click defense\n\n\n## Development\n\n```bash\n# Clone the repository\ngit clone https://github.com/WYRE-AI/proofpoint-mcp.git\ncd proofpoint-mcp\n\n# Install dependencies\nnpm install\n\n# Build\nnpm run build\n\n# Run tests\nnpm test\n```\n\n## Contributing\n\nContributions are welcome! Please see [CONTRIBUTING.md](CONTRIBUTING.md) if present, or open an issue to discuss changes.\n\n## License\n\nLicensed under the Apache License, Version 2.0. See [LICENSE](LICENSE) for details.\n",
  "bytes": 3660,
  "sha": "26437b8f11d764a0cf8185f8c862c3b94b66e12068e52eb88457848ef4145047",
  "repo_slug": "wyre-technology/proofpoint-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_wyre_technology_proofpoint_mcp_1a868aec/readme"
}