# KnowBe4 (oci · ghcr.io/wyre-technology/knowbe4-mcp:v1.1.4)

MCP server for KnowBe4 security awareness training — users, groups, training, phishing campaigns.

- Trust score: 42/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-22

## Components

- oci · `ghcr.io/wyre-technology/knowbe4-mcp:v1.1.4`: 42/100 (this document), [markdown](https://verifymcp.io/servers/wyre-technology-knowbe4-mcp/ghcr-io-wyre-technology-knowbe4-mcp-v1-1-4.md), [page](https://verifymcp.io/servers/wyre-technology-knowbe4-mcp/ghcr-io-wyre-technology-knowbe4-mcp-v1-1-4)

## Channel facts

- Registry: `oci`
- Package: `ghcr.io/wyre-technology/knowbe4-mcp:v1.1.4`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-22.

- **Supply Chain Security**: 0/100
  - Malware scan not yet available for this package.
  - Known CVEs could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.
  - Install-script risk not yet assessed.
  - Dependency health could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 0 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 91/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1986 tokens (~64/item across 31 items; 30 tools + 1 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.
  - Supports UI / widget rendering.

**Unverified: 2 categories.** Categories scored 0 because we could not verify them: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add wyre-technology-knowbe4-mcp -- docker run --rm -i ghcr.io/wyre-technology/knowbe4-mcp:v1.1.4
```

### Codex

```bash
codex mcp add wyre-technology-knowbe4-mcp -- docker run --rm -i ghcr.io/wyre-technology/knowbe4-mcp:v1.1.4
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "wyre-technology-knowbe4-mcp": {
      "type": "local",
      "command": [
        "docker",
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-technology/knowbe4-mcp:v1.1.4"
      ],
      "enabled": true
    }
  }
}
```

### Hermes

```yaml
mcp_servers:
  wyre-technology-knowbe4-mcp:
    command: "docker"
    args: ["run", "--rm", "-i", "ghcr.io/wyre-technology/knowbe4-mcp:v1.1.4"]
```

### Other

```json
{
  "mcpServers": {
    "wyre-technology-knowbe4-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-technology/knowbe4-mcp:v1.1.4"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-21 (score 42)

First indexed and scored.

## MCP tools (30)

### `knowbe4_navigate` (~139 tokens)

Discover available KnowBe4 tools by domain. Returns tool names and descriptions for the selected domain. All tools are callable at any time — this is a help/discovery aid, not a prerequisite.

Input parameters:

- `domain` (string, required): The domain to explore: - account: Account info and risk score history - users: User management and individual risk scores - groups: Group management, members, and group risk scores - phishing: Phishi…

### `knowbe4_back` (~23 tokens)

No-op tool for backwards compatibility. All tools are always available.

### `knowbe4_status` (~24 tokens)

Show credentials status and available domains. Also verifies API credentials are configured.

### `knowbe4_account_get` (~33 tokens)

Get KnowBe4 account information including subscription level, number of seats, admin details, and current risk score.

### `knowbe4_account_risk_score_history` (~71 tokens)

Get the account-level risk score history over time. Useful for tracking overall security posture improvement.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_users_list` (~113 tokens)

List KnowBe4 users with optional filtering by status or group. Returns paginated results including email, name, risk score, and department.

Input parameters:

- `group_id` (number): Filter by group ID to list only members of a specific group
- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)
- `status` (string): Filter by user status (active or archived)

### `knowbe4_users_get` (~55 tokens)

Get detailed information about a specific KnowBe4 user by ID, including their risk score, phish-prone percentage, training status, and group memberships.

Input parameters:

- `user_id` (number, required): The user ID to retrieve

### `knowbe4_users_risk_score_history` (~89 tokens)

Get a specific user's risk score history over time. Useful for tracking individual improvement in security awareness.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)
- `user_id` (number, required): The user ID to get risk score history for

### `knowbe4_groups_list` (~69 tokens)

List all KnowBe4 groups. Returns group names, member counts, and current risk scores.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_groups_get` (~44 tokens)

Get detailed information about a specific KnowBe4 group by ID, including risk score and member count.

Input parameters:

- `group_id` (number, required): The group ID to retrieve

### `knowbe4_groups_members` (~80 tokens)

Get all members of a specific group. Returns user details for each member.

Input parameters:

- `group_id` (number, required): The group ID to get members for
- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_groups_risk_score_history` (~89 tokens)

Get a group's risk score history over time. Useful for comparing security posture across departments or teams.

Input parameters:

- `group_id` (number, required): The group ID to get risk score history for
- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_phishing_campaigns_list` (~74 tokens)

List all phishing simulation campaigns. Returns campaign names, status, creation dates, and associated security test counts.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_phishing_campaigns_get` (~43 tokens)

Get detailed information about a specific phishing campaign by ID, including all associated security tests.

Input parameters:

- `campaign_id` (number, required): The phishing campaign ID

### `knowbe4_phishing_security_tests_list` (~82 tokens)

List all Phishing Security Tests (PSTs) across all campaigns. Returns test status, phish-prone percentage, and recipient counts.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_phishing_campaign_tests` (~80 tokens)

List all Phishing Security Tests (PSTs) for a specific campaign.

Input parameters:

- `campaign_id` (number, required): The phishing campaign ID
- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_phishing_security_test_get` (~59 tokens)

Get detailed results for a specific Phishing Security Test (PST) by ID. Includes phish-prone percentage, clicked/opened/reported counts.

Input parameters:

- `pst_id` (number, required): The Phishing Security Test ID

### `knowbe4_phishing_security_test_recipients` (~92 tokens)

Get recipient-level results for a specific PST. Shows which users clicked, opened, reported, or were otherwise affected.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)
- `pst_id` (number, required): The Phishing Security Test ID

### `knowbe4_phishing_security_test_recipient` (~65 tokens)

Get a specific recipient's detailed result for a PST, including click time, open time, and reported status.

Input parameters:

- `pst_id` (number, required): The Phishing Security Test ID
- `recipient_id` (number, required): The recipient (user) ID

### `knowbe4_training_campaigns_list` (~70 tokens)

List all training campaigns. Returns campaign names, status, enrollment counts, and completion rates.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_training_campaigns_get` (~46 tokens)

Get detailed information about a specific training campaign by ID, including modules, enrollments, and completion statistics.

Input parameters:

- `campaign_id` (number, required): The training campaign ID

### `knowbe4_training_enrollments_list` (~73 tokens)

List all training enrollments. Shows which users are enrolled in which training modules and their completion status.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_training_enrollments_get` (~43 tokens)

Get detailed information about a specific training enrollment by ID, including module progress and completion date.

Input parameters:

- `enrollment_id` (number, required): The enrollment ID

### `knowbe4_store_purchases_list` (~74 tokens)

List all store purchases (training content bought from the KnowBe4 ModStore). Shows purchased modules and content.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_store_purchases_get` (~36 tokens)

Get detailed information about a specific store purchase by ID.

Input parameters:

- `purchase_id` (number, required): The store purchase ID

### `knowbe4_policies_list` (~66 tokens)

List all security policies. Returns policy names, status, and acknowledgment requirements.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 100, max: 500)

### `knowbe4_policies_get` (~37 tokens)

Get detailed information about a specific policy by ID, including acknowledgment status.

Input parameters:

- `policy_id` (number, required): The policy ID

### `knowbe4_reporting_phishing_summary` (~88 tokens)

Get a summary of all phishing security tests including overall phish-prone percentage, total tests run, and aggregate click/open/report rates. Fetches all PSTs and computes statistics.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 500, max: 500)

### `knowbe4_reporting_training_summary` (~71 tokens)

Get a summary of all training campaigns including total enrollments, completion counts, and overall completion rate.

Input parameters:

- `page` (number): Page number for pagination (default: 1)
- `per_page` (number): Number of results per page (default: 500, max: 500)

### `knowbe4_reporting_risk_overview` (~36 tokens)

Get an overview of account risk posture including current risk score, recent risk score trend, and highest-risk groups.

## Diagnostics

Captured diagnostic sections: Provenance. The full working is on the page: https://verifymcp.io/servers/wyre-technology-knowbe4-mcp/ghcr-io-wyre-technology-knowbe4-mcp-v1-1-4#diagnostics

## Score history

- 2026-08-22: 42
- 2026-08-21: 42

## Links

- Repository: https://github.com/wyre-technology/knowbe4-mcp
- Changelog RSS feed: https://verifymcp.io/servers/wyre-technology-knowbe4-mcp/ghcr-io-wyre-technology-knowbe4-mcp-v1-1-4.xml
- Changelog JSON feed: https://verifymcp.io/servers/wyre-technology-knowbe4-mcp/ghcr-io-wyre-technology-knowbe4-mcp-v1-1-4.json
- HTML version of this page: https://verifymcp.io/servers/wyre-technology-knowbe4-mcp/ghcr-io-wyre-technology-knowbe4-mcp-v1-1-4