Cork MCP
MCPB · CORK-MCP.MCPB
Every Cork API operation, plus cross-client risk attribution and exploitability-first vuln triage.
Available components
Last scanned (9 hours ago)
Scores higher than 82% of MCPB servers
Category Security
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security0
- No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
- Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
- Install-script risk not yet assessed.Unverified
- Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 12 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability55
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 32673 tokens (~413/item across 79 items; 79 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management99
- Stability check failed: the tool surface changed between 0.1.4 and 0.1.8: 0 tool removals, 1 breaking changes, 0 additions. See how to fix → Fail
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 79 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 0
- Package version: 0.1.4 → 0.1.8 functional
- 31 Oct 26 +1
- Maintenance: unverified → pass ▲ functional
- 30 Oct 26 +1
- Provenance: unverified → fail ▼ security
- 29 Oct 26 −1
- Provenance: fail → unverified ▼ security
- Maintenance: pass → unverified ▼ functional
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 86.
- 25 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 76 to 79.
- 23 Oct 26 +1
- Stability: 0.70 → fail ▼ security
- Package version: 0.1.6 → 0.1.8 functional
- Package version: 0.1.6 → 0.1.7 functional
- 22 Oct 26 +1
- Tool safety: pass → unverified ▼ security
- Stability: 0.67 → unverified ▼ security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional
- Package version: 0.1.5 → 0.1.6 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed mcpb/https://github.com/Servosity/msp-skills/releases/download/cork-v0.1.8/cork-mcp.mcpb@0.1.8
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | mcpb |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
analytics ~590
Analyze locally synced data with count, group-by, and summary operations. Data must be synced first with the sync command.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| group-by | string | – | Field to group by |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| limit | number | – | Max groups to show (default: 25) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| type | string | – | Resource type to analyze |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
answer_an_advisory_the_moment_a_cve_is_named ~59
Scans the locally expanded CVE table to list every affected client and device, which the live API cannot filter on at all.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Override the recipe's positional slug value. |
No output schema declared.
No examples provided.
clients_devices ~533
Get devices for clients
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
clients_devices_get-client ~171
List devices observed for a client across all connected integrations, including hostnames, IP addresses, the integration each device was seen in, whether each device can receive an `Install Software` call (`can_install_software`), normalized operating system details (`os`), resolved device type (`device_type`: workstation/laptop/server/other), and hardware model (`model`). Device UUIDs can be used to filter `Get Software Vulnerabilities`. Requires a client UUID from `Get Clients`. Required: client-uuid. Optional: page (default: 1), page_size (default: 10). Returns array of Device.
| Name | Type | Req | Description |
|---|---|---|---|
| client-uuid | string | yes | Client uuid |
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| page_size | number | – | Page size |
No output schema declared.
No examples provided.
clients_domains ~533
Get domains for clients
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
clients_domains_get-client ~106
List email domains observed for a client. Domain UUIDs can be used to filter `Get Compliance Events`. Requires a client UUID from `Get Clients`. Required: client-uuid. Optional: page (default: 1), page_size (default: 10). Returns array of Domain.
| Name | Type | Req | Description |
|---|---|---|---|
| client-uuid | string | yes | Client uuid |
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| page_size | number | – | Page size |
No output schema declared.
No examples provided.
clients_get ~224
List clients with their financial protection status (`warranty_status`), associated integration tenants, and the 10 most recent Cork Cyber Scores (`score_history`, newest first). For older scores, such as quarter-over-quarter trends or filtering by a date range, use `Get Client Score History`. Client UUIDs from this response are required by `Get Client Devices`, `Get Client Inboxes`, `Get Client Domains`, `Get Compliance Events`, and vulnerability tools. _note: If API user is a distributor, use partner_uuid to scope results to a specific partner._. Optional: page (default: 1), page_size (default: 10), show_hidden (default: false) (plus 1 more). Returns array of Client.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| page_size | number | – | Page size |
| partner_uuid | string | – | Filter by partner UUID (distributor users only). Obtain partner UUIDs from Get Partners. |
| show_hidden | boolean | – | Include hidden/archived clients when true |
No output schema declared.
No examples provided.
clients_inboxes ~535
Get inboxes for clients
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
clients_inboxes_get-clients ~119
List email inboxes (users and shared mailboxes) observed for a client, with inbox type, associated domains, and the integration each inbox was sourced from. Requires a client UUID from `Get Clients`. Required: client-uuid. Optional: page (default: 1), page_size (default: 10). Returns array of Inbox.
| Name | Type | Req | Description |
|---|---|---|---|
| client-uuid | string | yes | Client uuid |
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| page_size | number | – | Page size |
No output schema declared.
No examples provided.
clients_score_history ~535
Get score history for clients
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
clients_score-history_get-client ~205
List a client's full Cork Cyber Score history, newest first, with the risk points each category (coverage, compliance, vulnerabilities, claims) deducted from that score. Use created_after and created_before to bound a period, e.g. one call per quarter, for trend reporting over time. Both bounds are inclusive, so a score timestamped exactly on a boundary is returned by both of two adjacent periods. `Get Clients` only carries the 10 most recent scores. Requires a client UUID from `Get Clients`. Required: client-uuid. Optional: created_after, created_before, page (default: 1) (plus 1 more). Returns array of ClientScoreHistory.
| Name | Type | Req | Description |
|---|---|---|---|
| client-uuid | string | yes | Client uuid |
| created_after | string | – | Created after |
| created_before | string | – | Created before |
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| page_size | number | – | Page size |
No output schema declared.
No examples provided.
compliance_get-event-notification-settings ~137
List the notification and alerting rules configured for compliance events on client assets. Shows which event types trigger alerts and how they are routed. Required: client-uuid. Optional: device_uuid, inbox_uuid, domain_uuid (plus 2 more). Returns array of ComplianceEventNotificationSetting.
| Name | Type | Req | Description |
|---|---|---|---|
| client-uuid | string | yes | Client uuid |
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| device_uuid | string | – | Device uuid |
| domain_uuid | string | – | Domain uuid |
| inbox_uuid | string | – | Inbox uuid |
| page_size | number | – | Page size |
No output schema declared.
No examples provided.
compliance_get-event-types ~44
List all compliance event types with their descriptions and cure periods. Use this to discover valid event_type values before filtering `Get Compliance Events`. Returns array of ComplianceEventType.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
compliance_get-events ~336
List policy violations and risk events detected for a client's assets. Filter by event_type (use `Get Compliance Event Types` for valid values), device, inbox, or domain UUID. Use at_risk=true to show only currently active risks. Resolved events are excluded by default; set show_resolved=true to include them. Required: client-uuid. Optional: event_type, device_uuid, inbox_uuid (plus 10 more). Returns array of ComplianceEvent.
| Name | Type | Req | Description |
|---|---|---|---|
| at_risk | boolean | – | When true, only return currently active (unresolved, unsuppressed) risk events |
| client-uuid | string | yes | Client uuid |
| created_after | string | – | Created after |
| created_before | string | – | Created before |
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| device_uuid | string | – | Filter events to a specific device UUID from Get Client Devices |
| domain_uuid | string | – | Filter events to a specific domain UUID from Get Client Domains |
| event_type | string | – | Filter by event type. Use Get Compliance Event Types for valid values. |
| inbox_uuid | string | – | Filter events to a specific inbox UUID from Get Client Inboxes |
| page_size | number | – | Page size |
| resolved_after | string | – | show_resolved must be true |
| resolved_before | string | – | show_resolved must be true |
| show_resolved | boolean | – | Include resolved events in results. Required to use resolved_after or resolved_before filters. |
| show_silenced | boolean | – | Include silenced/suppressed events in results |
No output schema declared.
No examples provided.
compliance_overdue ~755
Surface compliance events that have blown their event type's remediation window, bucketed by age. The cure period lives on the event-type catalog while the at-risk timestamp lives on the event itself, in two endpoints nothing joins. This command joins them and reports only events that are actually past due. Use this command to find compliance events that are now costing score. Do NOT use this command to list or filter a client's raw event stream; use 'compliance get-events' instead.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| bucket | boolean | – | Include a count of overdue events per age bucket (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| client-uuid | string | – | Restrict the sweep to one client |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| include-silenced | boolean | – | Include events that have been silenced in Cork (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| limit | number | – | Maximum overdue events to return (0 for all) (default: 50) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| max-clients | number | – | Maximum clients to walk before returning partial results (default: 50) |
| max-scan-pages | number | – | Maximum event pages to read per client (default: 5) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
context ~29
Get API domain context: resource taxonomy, auth requirements, query tips, and unique capabilities. Call this first.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
coverage ~533
coverage subcommands: gaps
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
coverage_gaps ~721
Diff the devices a connector reports against the devices Cork attributes to a client, exposing endpoints one tool sees and another is missing. This is the concrete driver behind coverage_impact in the score decomposition, and no endpoint compares the two sets. Devices are matched on associated_endpoints[].integration_identifier, an exact per-connector key, so the diff does not rely on name guessing; devices with no identifier on either side are reported as unmatched rather than silently assumed covered. Use this command to find device-level coverage blind spots inside a client. Do NOT use this command to check whether a connector is down or stale; use 'integrations health' instead.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client | string | – | Client uuid to audit (required) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| max-connectors | number | – | Maximum connectors to walk before returning partial results (default: 10) |
| max-scan-pages | number | – | Maximum device pages to read per source (default: 5) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
distributor_get-partners ~98
List partner sub-accounts managed by this distributor. Returns partner UUIDs that can be passed as partner_uuid to `Get Clients` and other tools to scope results to a specific partner. _note: distributor accounts only_. Optional: page (default: 1), page_size (default: 10).
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| page_size | number | – | Page size |
No output schema declared.
No examples provided.
distributor_provision-partner ~136
Provision a new Partner account in the system. _note: Requires distributor privileges._. Required: partner_name, primary_contact_email, primary_contact_name. Optional: enable_default_notifications (default: true), send_welcome_email (default: true). Returns the new Partner.
| Name | Type | Req | Description |
|---|---|---|---|
| enable_default_notifications | boolean | – | Whether to enable default notifications for the partner |
| partner_name | string | yes | Partner name |
| primary_contact_email | string | yes | Primary contact email |
| primary_contact_name | string | yes | Primary contact name |
| send_welcome_email | boolean | – | Whether to send a welcome email to the primary contact |
No output schema declared.
No examples provided.
export ~638
Export paginated API data to a local file. Supports JSONL (one JSON object per line, streaming-friendly) and JSON (array). JSONL is recommended for large datasets as it has no memory pressure.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| format | string | – | Output format: jsonl or json (default: jsonl) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| id | string | – | Positional argument [id] |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| limit | number | – | Maximum records to export (0 = unlimited) (default: 0) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache for fresh data (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| resource | string | yes | Positional argument <resource> |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
import ~601
Import data from a JSONL file by issuing POST requests for each record. Each line must be a valid JSON object. Failed records are logged to stderr but do not stop the import.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| batch-size | number | – | Records per batch (future: batch API support) (default: 1) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Preview import without sending requests (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| resource | string | yes | Positional argument <resource> |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
integrations_connect ~94
Connect an API-based integration. This creates a new integration that will immediately begin syncing data. Requires valid API credentials. Required: credential_fields, vendor_key. Optional: display_name, partner_uuid. Returns the new NewIntegrationResponse.
| Name | Type | Req | Description |
|---|---|---|---|
| credential_fields | object | yes | Credential fields |
| display_name | string | – | Display name |
| partner_uuid | string | – | Partner uuid |
| vendor_key | string | yes | Vendor key |
No output schema declared.
No examples provided.
integrations_credentials ~533
Get credentials for integrations
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
integrations_credentials_get-integration ~54
Get an integration's credentials. _note: Integration must have been created via API to retrieve credentials._. Required: integration-uuid. Returns the IntegrationCredentials.
| Name | Type | Req | Description |
|---|---|---|---|
| integration-uuid | string | yes | Integration uuid |
No output schema declared.
No examples provided.
integrations_delete ~51
Delete an integration and stop all data collection from it. _note: Only API-created integrations can be deleted._. Required: integration-uuid. Destructive.
| Name | Type | Req | Description |
|---|---|---|---|
| integration-uuid | string | yes | Integration uuid |
No output schema declared.
No examples provided.
integrations_devices ~533
Get devices for integrations
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
integrations_devices_get-integration ~130
List devices observed from an integration, including hostnames, IP addresses, device properties (hardware, device type, model), and normalized operating system details (`os`) for devices that have been mapped. Required: integration-uuid. Optional: page (default: 1), page_size (default: 10), tenant_uuid. Returns array of IntegrationDevice.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| integration-uuid | string | yes | Integration uuid |
| page_size | number | – | Page size |
| tenant_uuid | string | – | Tenant uuid |
No output schema declared.
No examples provided.
integrations_get-available ~124
List integration types that can be connected to Cork, including required credential fields. Use this before `Connect an Integration` to determine which vendor keys and credential schemas are supported. Optional: vendor_type, page (default: 1), page_size (default: 10). Returns array of AvailableIntegration.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| page_size | number | – | Page size |
| vendor_type | string | – | Filter by vendor type (e.g. 'rmm', 'edr', 'mfa') |
No output schema declared.
No examples provided.
integrations_get-connected ~202
List integrations that have been connected to Cork, including their vendor, connection status, and sync details. RMM integrations also carry an `installer` block describing whether software installs can run through them (`capable`, `requires_manual_setup`, `authorized`, `configured_package_managers`). Use it with `Get Client Devices` (`associated_endpoints[].integration`) to decide which integration an `Install Software` call will route through and whether it needs setup. Use this to discover integration UUIDs needed by `Get Integration Devices`, `Get Integration Users`, and `Get Integration Tenants`. Optional: partner_uuid, page (default: 1), page_size (default: 10). Returns array of Integration.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination cursor returned by a previous MCP response |
| page_size | number | – | Page size |
| partner_uuid | string | – | Filter by partner UUID (distributor users only). Obtain partner UUIDs from Get Partners. |
No output schema declared.
No examples provided.
integrations_health ~734
Flag connectors that are down, degraded, or reporting healthy while their last sync has gone stale, and name the clients each one feeds. Cork ships connection_status and last_synced_at in the same payload but never compares that timestamp to now, so a connector whose feed stopped days ago can keep reporting ok indefinitely. That silent-stale case is what this command exists to catch, and it is reported separately from an openly failing one. Use this command to find connectors that are down, degraded, or silently stale. Do NOT use this command for a plain inventory of connected integrations; use 'integrations get-connected' instead.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| all | boolean | – | Include healthy connectors in the output (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| max-scan-pages | number | – | Maximum integration pages to read (default: 5) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| stale-after | string | – | Treat a connector as stale when its last sync is older than this (24h, 7d) (default: 24h) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
integrations_raw_data ~535
Get raw data for integrations
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
integrations_raw-data_get-integration ~69
Get a presigned download URL for an integration's raw synced data (10-minute expiry). _note: Requires distributor privileges and integration must have been created via API._. Required: integration-uuid. Returns the IntegrationRawData.
| Name | Type | Req | Description |
|---|---|---|---|
| integration-uuid | string | yes | Integration uuid |
No output schema declared.
No examples provided.
integrations_resync ~535
Create resync for integrations
| Name | Type | Req | Description |
|---|---|---|---|
| agent | boolean | – | Set all agent-friendly defaults (--json --compact --no-input --no-color --yes) (default: false) |
| allow-partial-failure | boolean | – | Downgrade response-body partial-failure (e.g. partialFailureError) to a warning instead of a non-zero exit (default: false) |
| client-profile | string | – | Select the tenant-gated client profile (env: PRINTING_PRESS_CLIENT_PROFILE) |
| compact | boolean | – | Return only key fields (id, name, status, timestamps) for minimal token usage (default: false) |
| csv | boolean | – | Output as CSV (table and array responses) (default: false) |
| data-source | string | – | Data source for read commands: auto (live with local fallback), live (API only), local (synced data only) (default: auto) |
| dry-run | boolean | – | Show request without sending (default: false) |
| human-friendly | boolean | – | Enable colored output and rich formatting (default: false) |
| idempotent | boolean | – | Treat already-existing create results as a successful no-op (default: false) |
| ignore-missing | boolean | – | Treat missing delete targets as a successful no-op (default: false) |
| json | boolean | – | Output as JSON (default: false) |
| max-age | string | – | Maximum acceptable age of local-store data before a stderr hint suggests sync; 0 disables (default: 30m0s) |
| no-cache | boolean | – | Bypass response cache (default: false) |
| no-color | boolean | – | Disable colored output (default: false) |
| no-input | boolean | – | Disable all interactive prompts (for CI/agents) (default: false) |
| no-learn | boolean | – | Disable the teach/recall learning loop for this invocation (default: false) |
| plain | boolean | – | Output as plain tab-separated text (default: false) |
| quiet | boolean | – | Bare output, one value per line (default: false) |
| rate-limit | number | – | Max requests per second (0 to disable) (default: 0) |
| receipt | boolean | – | Write an atomic private run receipt (default: false) |
| select | string | – | Comma-separated fields to include in output (e.g. --select associated_tenants,created_at,hidden) |
| timeout | string | – | Request timeout (default: 1m0s) |
| yes | boolean | – | Skip confirmation prompts (for agents and scripts) (default: false) |
No output schema declared.
No examples provided.
integrations_resync_integration ~39
Manually trigger a data refresh for an individual integration. Required: integration-uuid.
| Name | Type | Req | Description |
|---|---|---|---|
| integration-uuid | string | yes | Integration uuid |
No output schema declared.
No examples provided.
How do I install the Cork MCP server?
Cork MCP ships as an MCPB bundle, a single file you download and open in an MCP host that supports MCPB bundles, such as Claude Desktop. The host reads the launch command from the bundle's own manifest, so there is no command to copy. Before opening it, check the file's SHA-256 matches the one the MCP registry declares for it, a271533ef93c46b101389ff27160b96abb51b9d71c8b4832403cc90a40b7c0ec; the commands to do that are on this page. If it does not match, do not open it.
mcpb · cork-mcp.mcpb
Download bundleCheck the download matches the SHA-256 the MCP registry declares before you open it. If it does not match, do not open the file.
SHA-256
a271533ef93c46b101389ff27160b96abb51b9d71c8b4832403cc90a40b7c0ec
macOS / Linux
echo "a271533ef93c46b101389ff27160b96abb51b9d71c8b4832403cc90a40b7c0ec cork-mcp.mcpb" | shasum -a 256 -c
Windows (PowerShell)
(Get-FileHash -Algorithm SHA256 .\cork-mcp.mcpb).Hash -eq "a271533ef93c46b101389ff27160b96abb51b9d71c8b4832403cc90a40b7c0ec"
Run it in the folder you saved the bundle to, then open the file with an MCPB-capable host such as Claude Desktop.
What is the Cork MCP server?
Cork MCP is listed in the public MCP registry as io.github.Servosity/cork-mcp. Every Cork API operation, plus cross-client risk attribution and exploitability-first vuln triage. This page covers its MCPB bundle (https://github.com/Servosity/msp-skills/releases/download/cork-v0.1.8/cork-mcp.mcpb).
Is the Cork MCP server safe to use?
Cork MCP scores 51 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Cork MCP server expose?
Cork MCP exposes 79 tools: analytics, answer_an_advisory_the_moment_a_cve_is_named, clients_devices, clients_devices_get-client, clients_domains, and 74 more. Their descriptions and schemas cost roughly 32,673 tokens of context every time the server is loaded.
What licence is the Cork MCP server under?
Cork MCP declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.