Huntress MCP Server

io.github.WYRE-AI/huntress-mcp

Repository Registry

What is the Huntress MCP server?

MCP server for Huntress — accounts, organizations, agents, incidents, and reports.

How to install Huntress

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

HUNTRESS_API_KEY
required
secret
Huntress API key (public identifier portion of the API credential)
HUNTRESS_API_SECRET
required
secret
Huntress API secret
MCP_TRANSPORT
Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODE
Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVEL
Log verbosity: debug, info, warn, error

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "huntress-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/huntress-mcp:v1.2.21"
      ],
      "env": {
        "HUNTRESS_API_KEY": "<YOUR_HUNTRESS_API_KEY>",
        "HUNTRESS_API_SECRET": "<YOUR_HUNTRESS_API_SECRET>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}

Related MCP servers

ImmyBot

Active

MCP server for ImmyBot — Windows software deployment, maintenance, tenants, deployments.

TypeScript

View repository →

Inforcer

Active

Read-only MCP server for Inforcer M365 baseline governance, plus assessment and report runs.

TypeScript

View repository →

IQMS / DELMIA Apriso

Active

MCP server for IQMS (DELMIAworks) ERP — manufacturing, inventory, production, and quality.

TypeScript

View repository →

Ironscales

Active

MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.

TypeScript

Apache-2.0

View repository →

Island Browser

Active

MCP server for Island Browser's Admin Actions, Audit, Compromised Credential, and Device APIs.

TypeScript

View repository →

IT Glue

Active

Access IT Glue documentation, assets, configurations, passwords, and flexible assets via Claude.

TypeScript

Apache-2.0

View repository →