CIPP
OCI · GHCR.IO/WYRE-TECHNOLOGY/CIPP-MCP:V1.7.3
MCP server for CIPP — M365 multi-tenant management for MSPs (users, tenants, policies).
Available components
Last scanned (3 hours ago)
Scores higher than 68% of OCI servers
Category Cloud Infrastructure
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security0
- No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
- Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
- Install-script risk not yet assessed.Unverified
- Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency6
- Repository check failed: the declared repository URL redirects; it must resolve directly. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: the license (NOASSERTION) isn't a recognized OSI-approved license. See how to fix → Fail
- Actively maintained (last published 64 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability77
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 4821 tokens (~112/item across 43 items; 43 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
- Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 44 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 17 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Oct 26 −3
No change was recorded against any check on this day. Stability & Change Management went from 97 to 80.
- 10 Oct 26 +2
No change was recorded against any check on this day. Stability & Change Management went from 87 to 97. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 7 Oct 26 −2
- Stability: pass → 0.87 functional
- 4 Oct 26 0
- Stability: 0.97 → pass security
- 3 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 17 Oct 2026 · Analysed oci/ghcr.io/wyre-technology/cipp-mcp:v1.7.3
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | oci |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
cipp_add_scheduled_item ~236
Create a new scheduled task
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | yes | The CIPP function or command to execute on the schedule (e.g. "Get-CIPPAlerts"). |
| parameters | object | – | Arguments passed to the scheduled command, keyed by parameter name. Omit only when the command genuinely takes no arguments — without it the command runs bare. |
| recurrence | string | – | Cron expression or friendly recurrence interval (e.g. "0 9 * * 1" for every Monday at 09:00, or "Daily"). Omit for a one-off task. |
| scheduledTime | string | yes | When the task should first run — an ISO 8601 datetime (e.g. "2026-06-01T09:00:00Z") or Unix epoch seconds. Converted to epoch seconds before it is sent to CIPP. |
| taskName | string | yes | Human-readable name to identify this scheduled task in the CIPP UI. |
| tenantFilter | string | – | Optional tenant domain name or ID to scope the scheduled task. Use 'allTenants' to run across every managed tenant. |
No output schema declared.
No examples provided.
cipp_bec_check ~82
Run a Business Email Compromise check on a user
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| userId | string | yes | The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com). |
No output schema declared.
No examples provided.
cipp_create_group ~215
⚠ HIGH-IMPACT. Creates a new group in the tenant, which can be used for security policy assignments (RBAC, Conditional Access) or mail distribution. Reversible by deleting the group. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | Optional free-text description of the group purpose. |
| displayName | string | yes | Human-readable name for the new group. |
| mailEnabled | boolean | – | When true, the group is mail-enabled and can receive email. Required for Microsoft 365 groups. |
| mailNickname | string | – | The mail alias used as the local part of the group email address (e.g. "finance-team" for finance-team@contoso.com). Required when mailEnabled is true. |
| securityEnabled | boolean | – | When true, the group can be used for security policy assignments (RBAC, Conditional Access, etc.). |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_create_standard_template ~89
⚠ HIGH-IMPACT. Creates or updates a CIPP Standards Template (upsert by GUID). A template assigned to tenants with any Remediate-action standard WILL modify those tenants on the next standards run. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| template | object | yes | The full Standards Template JSON object. Must include a "tenantFilter" assigning it to at least one tenant. |
No output schema declared.
No examples provided.
cipp_create_user ~258
⚠ HIGH-IMPACT. Creates a new user account in the tenant, which grants directory presence and may include initial credentials and license/role eligibility. Reversible by deleting or disabling the user. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | Two-letter ISO 3166-1 alpha-2 country code representing the user's location (e.g. 'US', 'GB'). |
| department | string | – | The department the user belongs to. |
| displayName | string | yes | The user's full display name as it will appear in the directory (e.g. 'Alice Smith'). |
| givenName | string | – | The user's first (given) name. |
| jobTitle | string | – | The user's job title as it appears in the directory. |
| password | string | yes | Initial password for the account. Should meet the tenant password complexity policy. |
| surname | string | – | The user's last name (surname). |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| userPrincipalName | string | yes | The user's sign-in address / UPN (e.g. alice@contoso.com). Must be unique within the tenant. |
No output schema declared.
No examples provided.
cipp_delete_standard_template ~63
⚠ HIGH-IMPACT. Permanently deletes a CIPP Standards Template by ID. Tenants assigned to it lose the standards it enforced. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| templateId | string | yes | The GUID of the Standards Template to delete. |
No output schema declared.
No examples provided.
cipp_disable_user ~103
⚠ HIGH-IMPACT. Disables a user account, blocking sign-in. Reversible by re-enabling the account. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| userId | string | yes | The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com). |
No output schema declared.
No examples provided.
cipp_edit_user ~276
⚠ HIGH-IMPACT. Edits an existing user's properties, which can include directory attributes, usage location, and may grant or revoke roles or license eligibility. Reversible by editing again. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| department | string | – | Updated department for the user. |
| displayName | string | – | Updated full display name for the user. |
| jobTitle | string | – | Updated job title for the user. |
| licenses | array | – | License SKU GUIDs the user should hold after the edit (CIPP reconciles: missing SKUs are added, extra assigned SKUs are removed). Use cipp_list_licenses to discover SKU ids. Mutually exclusive with r… |
| removeLicenses | boolean | – | ⚠ When true, strips EVERY license assigned to the user. Mutually exclusive with a non-empty licenses list. |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| usageLocation | string | – | Two-letter ISO 3166-1 alpha-2 country code for license assignment eligibility (e.g. 'US'). Required before assigning most Microsoft 365 licences. |
| userId | string | yes | The user's Azure AD object ID or UPN to identify the account to modify. |
No output schema declared.
No examples provided.
cipp_get_tenant_alignment ~73
Report each tenant's alignment percentage against its assigned Standards Templates — the key signal for deciding which standards are safe to promote to Remediate. Omit tenantFilter to report on all tenants.
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | – | Optional tenant domain or ID. Omit to report alignment across all managed tenants. |
No output schema declared.
No examples provided.
cipp_get_tenant_details ~42
Get detailed information about a specific tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID, use 'allTenants' for all |
No output schema declared.
No examples provided.
cipp_get_tenant_drift ~63
Report standards drift — settings that deviate from a tenant's assigned Standards Template. Omit tenantFilter to report drift across all tenants.
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | – | Optional tenant domain or ID. Omit to report drift across all managed tenants. |
No output schema declared.
No examples provided.
cipp_get_version ~16
Get CIPP version information
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
cipp_list_alert_queue ~18
List queued alerts across all tenants
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
cipp_list_audit_logs ~102
List audit log entries for a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| days | number | – | Number of days to look back when retrieving log entries. Defaults to 7 when omitted. |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| type | string | – | Filter results to a specific log type (e.g. "AzureActiveDirectory", "Exchange", "SharePoint"). |
No output schema declared.
No examples provided.
cipp_list_bpa ~50
Get Best Practice Analyser results for a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_list_conditional_access_policies ~51
List Conditional Access policies for a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_list_csp_licenses ~20
List all CSP licenses across tenants
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
cipp_list_domain_health ~56
Check domain health (DMARC, DKIM, SPF) for a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_list_enterprise_apps ~225
List enterprise applications (service principals) in a tenant — including third-party SaaS apps that customers have integrated via OAuth (Slack, Salesforce, Zoom, etc.). Returns appId, displayName, publisher, owner-org, signInAudience, tags, and creation date. Use tenantFilter='allTenants' for cross-tenant fan-out — CIPP handles per-tenant errors inline, so a 403 from one opt-out tenant returns as an error row rather than failing the call. Excludes Microsoft-built-in apps by default (owner org f8cdef31-…); pass includeBuiltIn=true to include them.
| Name | Type | Req | Description |
|---|---|---|---|
| includeBuiltIn | boolean | – | When true, includes Microsoft-built-in service principals (owner org f8cdef31-a31e-4b4a-93e4-5f571e91255a). Defaults to false (third-party / customer-installed apps only). |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_list_gdap_invites ~20
List pending GDAP relationship invites
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
cipp_list_gdap_roles ~27
List available GDAP (Granular Delegated Admin Privileges) roles
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
cipp_list_groups ~66
List groups in a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| search | string | – | Optional text to filter results by group display name. Partial matches are supported. |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_list_licenses ~49
List license assignments and usage for a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_list_logs ~57
List CIPP application logs
| Name | Type | Req | Description |
|---|---|---|---|
| dateFilter | string | – | ISO 8601 date string used to filter log entries to a specific day (e.g. "2024-06-01"). Omit to retrieve recent logs. |
No output schema declared.
No examples provided.
cipp_list_mailbox_permissions ~67
List permissions on a specific mailbox
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| upn | string | yes | User Principal Name of the mailbox whose permissions should be listed. |
No output schema declared.
No examples provided.
cipp_list_mailboxes ~68
List mailboxes in a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| type | string | – | Filter mailboxes by recipient type. Omit to return all mailbox types. |
No output schema declared.
No examples provided.
cipp_list_mfa_users ~51
List users and their MFA status in a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_list_named_locations ~52
List named locations (trusted IPs) for a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_list_scheduled_items ~19
List scheduled tasks in CIPP
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
cipp_list_standard_templates ~23
List the CIPP Standards Templates configured across the partner tenant.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
cipp_list_standards ~49
List compliance standards configured for a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_list_tenants ~42
List all tenants managed in CIPP
| Name | Type | Req | Description |
|---|---|---|---|
| allTenants | boolean | – | When true, forces retrieval of every managed tenant regardless of any default filter. |
No output schema declared.
No examples provided.
cipp_list_user_devices ~78
List devices enrolled by a user
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| userId | string | yes | The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com). |
No output schema declared.
No examples provided.
cipp_list_user_groups ~80
List groups a user is a member of
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| userId | string | yes | The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com). |
No output schema declared.
No examples provided.
cipp_list_users ~111
List users in a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| searchField | string | – | The user attribute to search on. Must be provided together with searchValue. |
| searchValue | string | – | Value to match against the chosen searchField. displayName matches on prefix; userPrincipalName and mail must match exactly. Omit both search parameters to list every user in the tenant. |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_offboard_user ~668
⚠ DESTRUCTIVE — IRREVERSIBLE. Queues CIPP's offboarding job for a user. Every action is opt-in: at least one must be enabled or the call is rejected. Returns once the job is QUEUED — CIPP reports success on task creation, not completion, so confirm the outcome in CIPP's Offboarding view before reporting the account as offboarded. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| AccessAutomap | array | – | UPNs to grant full access to the user's mailbox, automapped into their Outlook. |
| AccessNoAutomap | array | – | UPNs to grant full access to the user's mailbox without automapping. |
| ClearImmutableId | boolean | – | Clear the immutable ID, breaking the link to an on-premises AD object. |
| ConvertToShared | boolean | – | Convert the mailbox to a shared mailbox so it can be retained without a license. |
| DeleteUser | boolean | – | ⚠ Delete the account outright. Do not combine with actions that need the account to exist afterwards. |
| DisableOneDriveSharing | boolean | – | Revoke sharing links on the user's OneDrive. Requires a recent CIPP build; older ones ignore it. |
| DisableSignIn | boolean | – | Disable the account so the user can no longer sign in. |
| HideFromGAL | boolean | – | Hide the mailbox from the Global Address List. |
| KeepCopy | boolean | – | When forwarding, keep a copy of each message in the original mailbox. Only meaningful alongside forward. |
| OOO | string | – | Out-of-office auto-reply message to set on the mailbox. Omit to leave the auto-reply unchanged. |
| OnedriveAccess | array | – | UPNs to grant access to the user's OneDrive. |
| RemoveGroups | boolean | – | Remove the user from all groups they are a member of. |
| RemoveLicenses | boolean | – | Remove every license assigned to the user. |
| RemoveMFADevices | boolean | – | Remove all registered MFA methods for the user. |
| RemoveMobile | boolean | – | Remove the user's registered mobile devices. |
| RemoveRules | boolean | – | Remove all inbox rules from the mailbox. |
| RemoveTeamsPhoneDID | boolean | – | Release the Teams phone number (DID) assigned to the user. |
| ResetPass | boolean | – | Reset the account password to a new random value. |
| RevokeSessions | boolean | – | Revoke all active sign-in sessions and refresh tokens. |
| disableForwarding | boolean | – | Remove any existing forwarding configured on the mailbox. |
| forward | string | – | UPN to forward the user's incoming mail to. Omit to leave forwarding unchanged. |
| removeCalendarInvites | boolean | – | Cancel calendar invites the user organised. |
| removeCalendarPermissions | boolean | – | Remove the user's permissions on other users' calendars across the tenant. |
| removePermissions | boolean | – | Remove the user's delegated access to other mailboxes across the tenant. |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| userId | string | yes | The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com). |
No output schema declared.
No examples provided.
cipp_ping ~15
Check CIPP API connectivity
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
cipp_reset_mfa ~111
⚠ HIGH-IMPACT. Resets all MFA methods for a user, requiring them to re-register their authentication methods. Reversible by re-enabling MFA. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| userId | string | yes | The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com). |
No output schema declared.
No examples provided.
cipp_reset_password ~131
⚠ HIGH-IMPACT. Resets a user's password, invalidating their current password. Reversible by setting a new password. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| newPassword | string | – | The replacement password to set. If omitted, a random password is generated and returned in the response. |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| userId | string | yes | The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com). |
No output schema declared.
No examples provided.
cipp_revoke_sessions ~110
⚠ HIGH-IMPACT. Revokes all active sessions for a user, forcing them to re-authenticate. Reversible by the user signing in again. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| userId | string | yes | The target user's Azure AD object ID or User Principal Name (UPN, e.g. alice@contoso.com). |
No output schema declared.
No examples provided.
cipp_run_standards_check ~51
Trigger a standards compliance check for a tenant
| Name | Type | Req | Description |
|---|---|---|---|
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
No output schema declared.
No examples provided.
cipp_set_email_forwarding ~158
⚠ HIGH-IMPACT. Configures email forwarding on a mailbox, silently redirecting the user's incoming mail to another address. This is a common data-exfiltration vector. Reversible by removing the forwarding rule. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| forwardTo | string | – | Email address to forward incoming messages to. Omit this parameter to disable forwarding. |
| keepCopy | boolean | – | When true (default), a copy of each forwarded message is retained in the original mailbox. |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| upn | string | yes | User Principal Name of the mailbox to configure forwarding on. |
No output schema declared.
No examples provided.
cipp_set_out_of_office ~472
⚠ HIGH-IMPACT. Configures the out-of-office / auto-reply for a mailbox, which causes automated messages to be sent to internal and/or external senders. Reversible by disabling the auto-reply. Confirm with the user before invoking.
| Name | Type | Req | Description |
|---|---|---|---|
| autoDeclineFutureRequestsWhenOOF | boolean | – | Automatically decline meeting requests that arrive for the out-of-office window. Only valid when state is 'Scheduled'. |
| createOOFEvent | boolean | – | Create a calendar event covering the out-of-office window. Only valid when state is 'Scheduled'. |
| declineEventsForScheduledOOF | boolean | – | Decline existing meetings that fall inside the out-of-office window. Only valid when state is 'Scheduled'. |
| declineMeetingMessage | string | – | Message sent when a meeting is declined. Only valid when state is 'Scheduled'. |
| endTime | string | – | When the scheduled auto-reply ends — ISO 8601 datetime or Unix epoch seconds. Only valid when state is 'Scheduled'; CIPP defaults to 7 days after startTime if omitted. |
| externalMessage | string | – | HTML or plain-text auto-reply message sent to senders outside the organisation. Omit to leave the existing message untouched. |
| internalMessage | string | – | HTML or plain-text auto-reply message sent to senders within the same organisation. Omit to leave the existing message untouched. |
| oofEventSubject | string | – | Subject line for the calendar event created by createOOFEvent. Only valid when state is 'Scheduled'. |
| startTime | string | – | When the scheduled auto-reply starts — ISO 8601 datetime or Unix epoch seconds. Only valid when state is 'Scheduled'; CIPP defaults to now if omitted. |
| state | string | yes | Auto-reply state. 'Scheduled' replies only between startTime and endTime — useful during offboarding. |
| tenantFilter | string | yes | Tenant domain name or ID to scope the operation. Use 'allTenants' to target every managed tenant. |
| timezone | string | – | Timezone the schedule is interpreted in (e.g. 'Eastern Standard Time'). Requires a recent CIPP build; older ones ignore it. |
| upn | string | yes | User Principal Name of the mailbox to configure. |
No output schema declared.
No examples provided.
How do I install the CIPP MCP server?
CIPP runs locally as a container image, launched with docker run --rm -i -e CIPP_API_URL -e CIPP_CLIENT_ID -e CIPP_CLIENT_SECRET -e CIPP_TENANT_ID -e MCP_TRANSPORT -e AUTH_MODE -e LOG_LEVEL ghcr.io/wyre-technology/cipp-mcp:v1.7.3. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.
oci · ghcr.io/wyre-technology/cipp-mcp:v1.7.3
claude mcp add wyre-technology-cipp-mcp -- docker run --rm -i -e CIPP_API_URL -e CIPP_CLIENT_ID -e CIPP_CLIENT_SECRET -e CIPP_TENANT_ID -e MCP_TRANSPORT -e AUTH_MODE -e LOG_LEVEL ghcr.io/wyre-technology/cipp-mcp:v1.7.3
This image reads CIPP_API_URL, CIPP_CLIENT_ID, CIPP_CLIENT_SECRET, CIPP_TENANT_ID, MCP_TRANSPORT, AUTH_MODE and LOG_LEVEL. Set them in your client's env block for this server; docker run -e passes each one through to the container.
What is the CIPP MCP server?
CIPP is an MCP server listed in the public MCP registry as io.github.wyre-technology/cipp-mcp. MCP server for CIPP, M365 multi-tenant management for MSPs (users, tenants, policies). This page covers its container image (ghcr.io/wyre-technology/cipp-mcp:v1.7.3).
Is the CIPP MCP server safe to use?
CIPP scores 47 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the CIPP MCP server expose?
CIPP exposes 43 tools: cipp_list_tenants, cipp_get_tenant_details, cipp_list_users, cipp_create_user, cipp_edit_user, and 38 more. Their descriptions and schemas cost roughly 4,613 tokens of context every time the server is loaded.
Is the CIPP MCP server still maintained?
CIPP is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the CIPP MCP server under?
CIPP declares the NOASSERTION licence, which is not on the OSI-approved list. Read the terms before using it at work, and note this covers the source only, not the cost of any service it calls.