PluginBench
MCP Server

Ironscales MCP Server

io.github.wyre-technology/ironscales-mcp

RepositoryRegistry

What is the Ironscales MCP server?

MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.

How to install Ironscales

Copy-paste configuration for popular MCP clients.

transport: stdio
Config generated by PluginBench — verify against the source before use.
Environment / auth
  • IRONSCALES_API_KEY
    required
    secret

    Ironscales API key

  • IRONSCALES_COMPANY_ID
    required

    Ironscales company (tenant) identifier

  • MCP_TRANSPORT

    Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.

  • AUTH_MODE

    Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.

  • LOG_LEVEL

    Log verbosity: debug, info, warn, error

Claude Desktop
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "ironscales-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/ironscales-mcp:v1.1.5"
      ],
      "env": {
        "IRONSCALES_API_KEY": "<YOUR_IRONSCALES_API_KEY>",
        "IRONSCALES_COMPANY_ID": "<YOUR_IRONSCALES_COMPANY_ID>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
Cursor
~/.cursor/mcp.json
{
  "mcpServers": {
    "ironscales-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/ironscales-mcp:v1.1.5"
      ],
      "env": {
        "IRONSCALES_API_KEY": "<YOUR_IRONSCALES_API_KEY>",
        "IRONSCALES_COMPANY_ID": "<YOUR_IRONSCALES_COMPANY_ID>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
Windsurf
~/.codeium/windsurf/mcp_config.json
{
  "mcpServers": {
    "ironscales-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/ironscales-mcp:v1.1.5"
      ],
      "env": {
        "IRONSCALES_API_KEY": "<YOUR_IRONSCALES_API_KEY>",
        "IRONSCALES_COMPANY_ID": "<YOUR_IRONSCALES_COMPANY_ID>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
VS Code
.vscode/mcp.json
{
  "servers": {
    "ironscales-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/ironscales-mcp:v1.1.5"
      ],
      "env": {
        "IRONSCALES_API_KEY": "<YOUR_IRONSCALES_API_KEY>",
        "IRONSCALES_COMPANY_ID": "<YOUR_IRONSCALES_COMPANY_ID>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
Claude Code
claude mcp add ironscales-mcp --env IRONSCALES_API_KEY=<YOUR_IRONSCALES_API_KEY> --env IRONSCALES_COMPANY_ID=<YOUR_IRONSCALES_COMPANY_ID> --env MCP_TRANSPORT=<YOUR_MCP_TRANSPORT> --env AUTH_MODE=<YOUR_AUTH_MODE> --env LOG_LEVEL=<YOUR_LOG_LEVEL> -- docker run -i --rm ghcr.io/wyre-technology/ironscales-mcp:v1.1.5

Related MCP servers

Abnormal Security

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

View repository →

Action1

Action1 MCP server — endpoint inventory, patch visibility, and policy automation via REST API.

View repository →

Alternative Payments

MCP server for Alternative Payments — customers, invoices, payment requests, payouts, webhooks.

View repository →

Atera

MCP server for Atera RMM — customers, tickets, and more.

View repository →

Autotask

MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.

View repository →

Auvik

MCP server for the Auvik network monitoring API — devices, alerts, statistics, billing.

View repository →