CIPP

OCI · GHCR.IO/WYRE-AI/CIPP-MCP:V1.8.1 · SCANNED SEP 20

MCP server for CIPP — M365 multi-tenant management for MSPs (users, tenants, policies).

Available components

oci · ghcr.io/wyre-ai/cipp-mcp:v1.8.1 38

38 38 Trust /100

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0

Malware scan not yet available for this package.Unverified
Known CVEs could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.Unverified
Install-script risk not yet assessed.Unverified
Dependency health could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.Unverified

Provenance & Transparency32

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
License check failed: the license (NOASSERTION) isn't a recognized OSI-approved license. See how to fix → Fail
Actively maintained (last published 1 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability76

AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 5315 tokens (~118/item across 45 items; 45 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Tool Safety100

No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
An AI judge read all 46 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 2 categories

Categories scored 0 because we could not verify them: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

How do I install the CIPP MCP server?

CIPP runs locally as a container image, launched with docker run --rm -i ghcr.io/wyre-ai/cipp-mcp:v1.8.1. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

oci · ghcr.io/wyre-ai/cipp-mcp:v1.8.1

Claude Cursor VS Code Codex opencode Hermes Netclaw Other

# add to Claude Code

claude mcp add wyre-ai-cipp-mcp -- docker run --rm -i ghcr.io/wyre-ai/cipp-mcp:v1.8.1

// .cursor/mcp.json

{
  "mcpServers": {
    "wyre-ai-cipp-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/cipp-mcp:v1.8.1"
      ]
    }
  }
}

// .vscode/mcp.json

{
  "servers": {
    "wyre-ai-cipp-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/cipp-mcp:v1.8.1"
      ]
    }
  }
}

# add to Codex CLI

codex mcp add wyre-ai-cipp-mcp -- docker run --rm -i ghcr.io/wyre-ai/cipp-mcp:v1.8.1

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "wyre-ai-cipp-mcp": {
      "type": "local",
      "command": [
        "docker",
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/cipp-mcp:v1.8.1"
      ],
      "enabled": true
    }
  }
}

# ~/.hermes/config.yaml

mcp_servers:
  wyre-ai-cipp-mcp:
    command: "docker"
    args: ["run", "--rm", "-i", "ghcr.io/wyre-ai/cipp-mcp:v1.8.1"]

// ~/.netclaw/config/netclaw.json

{
  "McpServers": {
    "wyre-ai-cipp-mcp": {
      "Transport": "stdio",
      "Command": "docker",
      "Arguments": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/cipp-mcp:v1.8.1"
      ]
    }
  }
}

// mcp.json

{
  "mcpServers": {
    "wyre-ai-cipp-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/cipp-mcp:v1.8.1"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

18 Sept 26 38

First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed oci/ghcr.io/wyre-ai/cipp-mcp:v1.8.1

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result	No attestation
Ecosystem	oci
Reason	No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 45 exposed · ~5,107 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens

cipp_add_scheduled_item ~236

Create a new scheduled task

Input Output Examples

Name	Type	Req	Description
command	string	yes	The CIPP function or command to execute on the schedule (e.g. "Get-CIPPAlerts").
parameters	object	–	Arguments passed to the scheduled command, keyed by parameter name. Omit only when the command genuinely takes no arguments — without it the command runs bare.
recurrence	string	–	Cron expression or friendly recurrence interval (e.g. "0 9 * * 1" for every Monday at 09:00, or "Daily"). Omit for a one-off task.
scheduledTime	string	yes	When the task should first run — an ISO 8601 datetime (e.g. "2026-06-01T09:00:00Z") or Unix epoch seconds. Converted to epoch seconds before it is sent to CIPP.
taskName	string	yes	Human-readable name to identify this scheduled task in the CIPP UI.
tenantFilter	string	–	Optional tenant domain name or ID to scope the scheduled task. Use 'allTenants' to run across every managed tenant.

No output schema declared.

No examples provided.

cipp_bec_check ~82

Run a Business Email Compromise check on a user

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
userId	string	yes	The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com).

No output schema declared.

No examples provided.

cipp_create_group ~215

⚠ HIGH-IMPACT. Creates a new group in the tenant, which can be used for security policy assignments (RBAC, Conditional Access) or mail distribution. Reversible by deleting the group. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
description	string	–	Optional free-text description of the group purpose.
displayName	string	yes	Human-readable name for the new group.
mailEnabled	boolean	–	When true, the group is mail-enabled and can receive email. Required for Microsoft 365 groups.
mailNickname	string	–	The mail alias used as the local part of the group email address (e.g. "finance-team" for finance-team@contoso.com). Required when mailEnabled is true.
securityEnabled	boolean	–	When true, the group can be used for security policy assignments (RBAC, Conditional Access, etc.).
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_create_standard_template ~89

⚠ HIGH-IMPACT. Creates or updates a CIPP Standards Template (upsert by GUID). A template assigned to tenants with any Remediate-action standard WILL modify those tenants on the next standards run. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
template	object	yes	The full Standards Template JSON object. Must include a "tenantFilter" assigning it to at least one tenant.

No output schema declared.

No examples provided.

cipp_create_user ~258

⚠ HIGH-IMPACT. Creates a new user account in the tenant, which grants directory presence and may include initial credentials and license/role eligibility. Reversible by deleting or disabling the user. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
country	string	–	Two-letter ISO 3166-1 alpha-2 country code representing the user's location (e.g. 'US', 'GB').
department	string	–	The department the user belongs to.
displayName	string	yes	The user's full display name as it will appear in the directory (e.g. 'Alice Smith').
givenName	string	–	The user's first (given) name.
jobTitle	string	–	The user's job title as it appears in the directory.
password	string	yes	Initial password for the account. Should meet the tenant password complexity policy.
surname	string	–	The user's last name (surname).
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
userPrincipalName	string	yes	The user's sign-in address / UPN (e.g. alice@contoso.com). Must be unique within the tenant.

No output schema declared.

No examples provided.

cipp_delete_standard_template ~63

⚠ HIGH-IMPACT. Permanently deletes a CIPP Standards Template by ID. Tenants assigned to it lose the standards it enforced. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
templateId	string	yes	The GUID of the Standards Template to delete.

No output schema declared.

No examples provided.

cipp_disable_user ~103

⚠ HIGH-IMPACT. Disables a user account, blocking sign-in. Reversible by re-enabling the account. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
userId	string	yes	The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com).

No output schema declared.

No examples provided.

cipp_edit_user ~276

⚠ HIGH-IMPACT. Edits an existing user's properties, which can include directory attributes, usage location, and may grant or revoke roles or license eligibility. Reversible by editing again. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
department	string	–	Updated department for the user.
displayName	string	–	Updated full display name for the user.
jobTitle	string	–	Updated job title for the user.
licenses	array	–	License SKU GUIDs the user should hold after the edit (CIPP reconciles: missing SKUs are added, extra assigned SKUs are removed). Use cipp_list_licenses to discover SKU ids. Mutually exclusive with r…
removeLicenses	boolean	–	⚠ When true, strips EVERY license assigned to the user. Mutually exclusive with a non-empty licenses list.
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
usageLocation	string	–	Two-letter ISO 3166-1 alpha-2 country code for license assignment eligibility (e.g. 'US'). Required before assigning most Microsoft 365 licences.
userId	string	yes	The user's Azure AD object ID or UPN to identify the account to modify.

No output schema declared.

No examples provided.

cipp_get_mailbox_usage ~144

Report the primary mailbox size and online-archive size for a single mailbox, with item counts, quotas and percent-of-quota. Reads live from Exchange, so unlike cipp_list_mailbox_usage it needs no CIPP report-cache sync and still returns real sizes for a tenant that conceals names in its Microsoft 365 usage reports.

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID that owns the mailbox. 'allTenants' is not supported here — this tool reads one mailbox at a time.
upn	string	yes	User Principal Name or Entra object ID of the mailbox owner (e.g. alice@contoso.com).

No output schema declared.

No examples provided.

cipp_get_tenant_alignment ~73

Report each tenant's alignment percentage against its assigned Standards Templates — the key signal for deciding which standards are safe to promote to Remediate. Omit tenantFilter to report on all tenants.

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	–	Optional tenant domain or ID. Omit to report alignment across all managed tenants.

No output schema declared.

No examples provided.

cipp_get_tenant_details ~42

Get detailed information about a specific tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID, use 'allTenants' for all

No output schema declared.

No examples provided.

cipp_get_tenant_drift ~63

Report standards drift — settings that deviate from a tenant's assigned Standards Template. Omit tenantFilter to report drift across all tenants.

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	–	Optional tenant domain or ID. Omit to report drift across all managed tenants.

No output schema declared.

No examples provided.

cipp_get_version ~16

Get CIPP version information

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

cipp_list_alert_queue ~18

List queued alerts across all tenants

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

cipp_list_audit_logs ~102

List audit log entries for a tenant

Input Output Examples

Name	Type	Req	Description
days	number	–	Number of days to look back when retrieving log entries. Defaults to 7 when omitted.
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
type	string	–	Filter results to a specific log type (e.g. "AzureActiveDirectory", "Exchange", "SharePoint").

No output schema declared.

No examples provided.

cipp_list_bpa ~50

Get Best Practice Analyser results for a tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_conditional_access_policies ~51

List Conditional Access policies for a tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_csp_licenses ~20

List all CSP licenses across tenants

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

cipp_list_domain_health ~56

Check domain health (DMARC, DKIM, SPF) for a tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_enterprise_apps ~225

List enterprise applications (service principals) in a tenant — including third-party SaaS apps that customers have integrated via OAuth (Slack, Salesforce, Zoom, etc.). Returns appId, displayName, publisher, owner-org, signInAudience, tags, and creation date. Use tenantFilter='allTenants' for cross-tenant fan-out — CIPP handles per-tenant errors inline, so a 403 from one opt-out tenant returns as an error row rather than failing the call. Excludes Microsoft-built-in apps by default (owner org f8cdef31-…); pass includeBuiltIn=true to include them.

Input Output Examples

Name	Type	Req	Description
includeBuiltIn	boolean	–	When true, includes Microsoft-built-in service principals (owner org f8cdef31-a31e-4b4a-93e4-5f571e91255a). Defaults to false (third-party / customer-installed apps only).
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_gdap_invites ~20

List pending GDAP relationship invites

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

cipp_list_gdap_roles ~27

List available GDAP (Granular Delegated Admin Privileges) roles

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

cipp_list_groups ~66

List groups in a tenant

Input Output Examples

Name	Type	Req	Description
search	string	–	Optional text to filter results by group display name. Partial matches are supported.
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_licenses ~49

List license assignments and usage for a tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_logs ~57

List CIPP application logs

Input Output Examples

Name	Type	Req	Description
dateFilter	string	–	ISO 8601 date string used to filter log entries to a specific day (e.g. "2024-06-01"). Omit to retrieve recent logs.

No output schema declared.

No examples provided.

cipp_list_mailbox_permissions ~67

List permissions on a specific mailbox

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
upn	string	yes	User Principal Name of the mailbox whose permissions should be listed.

No output schema declared.

No examples provided.

cipp_list_mailbox_usage ~350

Report mailbox and online-archive sizes across a tenant, largest first, with tenant-wide totals. Each mailbox reports bytes used, a human-readable size, item count, quota and percent-of-quota, for both the primary store and the archive. Answers 'who is near quota', 'which mailboxes need archiving', and 'how much Exchange storage does this tenant use'. Sizes come from CIPP's reporting database, which must have been synced — the live Exchange query carries no size data at all. For one mailbox, or when the cache is unavailable, use cipp_get_mailbox_usage.

Input Output Examples

Name	Type	Req	Description
limit	integer	–	Number of mailboxes to return (default 50, maximum 1000). The summary totals always cover every mailbox in the tenant, not just the ones returned — including `nearQuotaCount`, how many mailboxes sit…
minSizeGB	number	–	Only return mailboxes whose primary store and archive together reach this size in GB. Omit to return every mailbox.
sortBy	string	–	Ordering, largest first. `mailboxSize` (default) ranks by the primary store, `archiveSize` by the online archive, `totalSize` by the two combined, and `percentOfQuota` by how full the primary store i…
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_mailboxes ~68

List mailboxes in a tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
type	string	–	Filter mailboxes by recipient type. Omit to return all mailbox types.

No output schema declared.

No examples provided.

cipp_list_mfa_users ~51

List users and their MFA status in a tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_named_locations ~52

List named locations (trusted IPs) for a tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_scheduled_items ~19

List scheduled tasks in CIPP

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

cipp_list_standard_templates ~23

List the CIPP Standards Templates configured across the partner tenant.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

cipp_list_standards ~49

List compliance standards configured for a tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_list_tenants ~42

List all tenants managed in CIPP

Input Output Examples

Name	Type	Req	Description
allTenants	boolean	–	When true, forces retrieval of every managed tenant regardless of any default filter.

No output schema declared.

No examples provided.

cipp_list_user_devices ~78

List devices enrolled by a user

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
userId	string	yes	The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com).

No output schema declared.

No examples provided.

cipp_list_user_groups ~80

List groups a user is a member of

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
userId	string	yes	The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com).

No output schema declared.

No examples provided.

cipp_list_users ~111

List users in a tenant

Input Output Examples

Name	Type	Req	Description
searchField	string	–	The user attribute to search on. Must be provided together with searchValue.
searchValue	string	–	Value to match against the chosen searchField. displayName matches on prefix; userPrincipalName and mail must match exactly. Omit both search parameters to list every user in the tenant.
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_offboard_user ~668

⚠ DESTRUCTIVE — IRREVERSIBLE. Queues CIPP's offboarding job for a user. Every action is opt-in: at least one must be enabled or the call is rejected. Returns once the job is QUEUED — CIPP reports success on task creation, not completion, so confirm the outcome in CIPP's Offboarding view before reporting the account as offboarded. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
AccessAutomap	array	–	UPNs to grant full access to the user's mailbox, automapped into their Outlook.
AccessNoAutomap	array	–	UPNs to grant full access to the user's mailbox without automapping.
ClearImmutableId	boolean	–	Clear the immutable ID, breaking the link to an on-premises AD object.
ConvertToShared	boolean	–	Convert the mailbox to a shared mailbox so it can be retained without a license.
DeleteUser	boolean	–	⚠ Delete the account outright. Do not combine with actions that need the account to exist afterwards.
DisableOneDriveSharing	boolean	–	Revoke sharing links on the user's OneDrive. Requires a recent CIPP build; older ones ignore it.
DisableSignIn	boolean	–	Disable the account so the user can no longer sign in.
HideFromGAL	boolean	–	Hide the mailbox from the Global Address List.
KeepCopy	boolean	–	When forwarding, keep a copy of each message in the original mailbox. Only meaningful alongside forward.
OOO	string	–	Out-of-office auto-reply message to set on the mailbox. Omit to leave the auto-reply unchanged.
OnedriveAccess	array	–	UPNs to grant access to the user's OneDrive.
RemoveGroups	boolean	–	Remove the user from all groups they are a member of.
RemoveLicenses	boolean	–	Remove every license assigned to the user.
RemoveMFADevices	boolean	–	Remove all registered MFA methods for the user.
RemoveMobile	boolean	–	Remove the user's registered mobile devices.
RemoveRules	boolean	–	Remove all inbox rules from the mailbox.
RemoveTeamsPhoneDID	boolean	–	Release the Teams phone number (DID) assigned to the user.
ResetPass	boolean	–	Reset the account password to a new random value.
RevokeSessions	boolean	–	Revoke all active sign-in sessions and refresh tokens.
disableForwarding	boolean	–	Remove any existing forwarding configured on the mailbox.
forward	string	–	UPN to forward the user's incoming mail to. Omit to leave forwarding unchanged.
removeCalendarInvites	boolean	–	Cancel calendar invites the user organised.
removeCalendarPermissions	boolean	–	Remove the user's permissions on other users' calendars across the tenant.
removePermissions	boolean	–	Remove the user's delegated access to other mailboxes across the tenant.
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
userId	string	yes	The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com).

No output schema declared.

No examples provided.

cipp_ping ~15

Check CIPP API connectivity

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

cipp_reset_mfa ~111

⚠ HIGH-IMPACT. Resets all MFA methods for a user, requiring them to re-register their authentication methods. Reversible by re-enabling MFA. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
userId	string	yes	The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com).

No output schema declared.

No examples provided.

cipp_reset_password ~131

⚠ HIGH-IMPACT. Resets a user's password, invalidating their current password. Reversible by setting a new password. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
newPassword	string	–	The replacement password to set. If omitted, a random password is generated and returned in the response.
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
userId	string	yes	The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com).

No output schema declared.

No examples provided.

cipp_revoke_sessions ~110

⚠ HIGH-IMPACT. Revokes all active sessions for a user, forcing them to re-authenticate. Reversible by the user signing in again. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
userId	string	yes	The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com).

No output schema declared.

No examples provided.

cipp_run_standards_check ~51

Trigger a standards compliance check for a tenant

Input Output Examples

Name	Type	Req	Description
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.

No output schema declared.

No examples provided.

cipp_set_email_forwarding ~158

⚠ HIGH-IMPACT. Configures email forwarding on a mailbox, silently redirecting the user's incoming mail to another address. This is a common data-exfiltration vector. Reversible by removing the forwarding rule. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
forwardTo	string	–	Email address to forward incoming messages to. Omit this parameter to disable forwarding.
keepCopy	boolean	–	When true (default), a copy of each forwarded message is retained in the original mailbox.
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
upn	string	yes	User Principal Name of the mailbox to configure forwarding on.

No output schema declared.

No examples provided.

cipp_set_out_of_office ~472

⚠ HIGH-IMPACT. Configures the out-of-office / auto-reply for a mailbox, which causes automated messages to be sent to internal and/or external senders. Reversible by disabling the auto-reply. Confirm with the user before invoking.

Input Output Examples

Name	Type	Req	Description
autoDeclineFutureRequestsWhenOOF	boolean	–	Automatically decline meeting requests that arrive for the out-of-office window. Only valid when state is 'Scheduled'.
createOOFEvent	boolean	–	Create a calendar event covering the out-of-office window. Only valid when state is 'Scheduled'.
declineEventsForScheduledOOF	boolean	–	Decline existing meetings that fall inside the out-of-office window. Only valid when state is 'Scheduled'.
declineMeetingMessage	string	–	Message sent when a meeting is declined. Only valid when state is 'Scheduled'.
endTime	string	–	When the scheduled auto-reply ends — ISO 8601 datetime or Unix epoch seconds. Only valid when state is 'Scheduled'; CIPP defaults to 7 days after startTime if omitted.
externalMessage	string	–	HTML or plain-text auto-reply message sent to senders outside the organisation. Omit to leave the existing message untouched.
internalMessage	string	–	HTML or plain-text auto-reply message sent to senders within the same organisation. Omit to leave the existing message untouched.
oofEventSubject	string	–	Subject line for the calendar event created by createOOFEvent. Only valid when state is 'Scheduled'.
startTime	string	–	When the scheduled auto-reply starts — ISO 8601 datetime or Unix epoch seconds. Only valid when state is 'Scheduled'; CIPP defaults to now if omitted.
state	string	yes	Auto-reply state. 'Scheduled' replies only between startTime and endTime — useful during offboarding.
tenantFilter	string	yes	Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant.
timezone	string	–	Timezone the schedule is interpreted in (e.g. 'Eastern Standard Time'). Requires a recent CIPP build; older ones ignore it.
upn	string	yes	User Principal Name of the mailbox to configure.

No output schema declared.

No examples provided.

Common questions

What is the CIPP MCP server?

CIPP is an MCP server listed in the public MCP registry as io.github.WYRE-AI/cipp-mcp. MCP server for CIPP, M365 multi-tenant management for MSPs (users, tenants, policies). This page covers its container image (ghcr.io/wyre-ai/cipp-mcp:v1.8.1).

Is the CIPP MCP server safe to use?

CIPP scores 38 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the CIPP MCP server expose?

CIPP exposes 45 tools: cipp_list_tenants, cipp_get_tenant_details, cipp_list_users, cipp_create_user, cipp_edit_user, and 40 more. Their descriptions and schemas cost roughly 5,107 tokens of context every time the server is loaded.

Is the CIPP MCP server still maintained?

CIPP is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the CIPP MCP server under?

CIPP declares the NOASSERTION licence, which is not on the OSI-approved list. Read the terms before using it at work, and note this covers the source only, not the cost of any service it calls.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Badge

Put this score in your README. The image is served from a stable URL, updates when the score does, and links back to the evidence on this page. It shows nothing that is not already published here.

Score Verified Plain

The two-cell badge: our name, and this channel's current score out of 100.

Markdown

 [![VerifyMCP trust score for CIPP](https://verifymcp.io/badge/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1.svg)](https://verifymcp.io/servers/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1)

HTML

 <a href="https://verifymcp.io/servers/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1"><img src="https://verifymcp.io/badge/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1.svg" alt="VerifyMCP trust score for CIPP" height="20"></a>

A single cell stating that the server is listed here. Carries no number.

Markdown

 [![VerifyMCP trust score for CIPP](https://verifymcp.io/badge/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1.svg?variant=verified)](https://verifymcp.io/servers/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1)

HTML

 <a href="https://verifymcp.io/servers/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1"><img src="https://verifymcp.io/badge/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1.svg?variant=verified" alt="VerifyMCP trust score for CIPP" height="20"></a>

The score alone, tier-coloured, for a badge row that is already crowded.

Markdown

 [![VerifyMCP trust score for CIPP](https://verifymcp.io/badge/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1.svg?variant=plain)](https://verifymcp.io/servers/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1)

HTML

 <a href="https://verifymcp.io/servers/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1"><img src="https://verifymcp.io/badge/wyre-ai-cipp-mcp/ghcr-io-wyre-ai-cipp-mcp-v1-8-1.svg?variant=plain" alt="VerifyMCP trust score for CIPP" height="20"></a>

Score history · last 30 days

18 Sept 20 Sept