What is the Proofpoint MCP server?
MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.
How to install Proofpoint
Copy-paste configuration for popular MCP clients.
PROOFPOINT_SERVICE_PRINCIPALrequiredProofpoint TAP service principal (API user identifier)
PROOFPOINT_SERVICE_SECRETrequiredsecretProofpoint TAP service secret
PROOFPOINT_BASE_URLProofpoint TAP API base URL (defaults to https://tap-api-v2.proofpoint.com)
MCP_TRANSPORTTransport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODECredential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVELLog verbosity: debug, info, warn, error
{
"mcpServers": {
"proofpoint-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-technology/proofpoint-mcp:v1.0.4"
],
"env": {
"PROOFPOINT_SERVICE_PRINCIPAL": "<YOUR_PROOFPOINT_SERVICE_PRINCIPAL>",
"PROOFPOINT_SERVICE_SECRET": "<YOUR_PROOFPOINT_SERVICE_SECRET>",
"PROOFPOINT_BASE_URL": "<YOUR_PROOFPOINT_BASE_URL>",
"MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
"AUTH_MODE": "<YOUR_AUTH_MODE>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}{
"mcpServers": {
"proofpoint-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-technology/proofpoint-mcp:v1.0.4"
],
"env": {
"PROOFPOINT_SERVICE_PRINCIPAL": "<YOUR_PROOFPOINT_SERVICE_PRINCIPAL>",
"PROOFPOINT_SERVICE_SECRET": "<YOUR_PROOFPOINT_SERVICE_SECRET>",
"PROOFPOINT_BASE_URL": "<YOUR_PROOFPOINT_BASE_URL>",
"MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
"AUTH_MODE": "<YOUR_AUTH_MODE>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}{
"mcpServers": {
"proofpoint-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-technology/proofpoint-mcp:v1.0.4"
],
"env": {
"PROOFPOINT_SERVICE_PRINCIPAL": "<YOUR_PROOFPOINT_SERVICE_PRINCIPAL>",
"PROOFPOINT_SERVICE_SECRET": "<YOUR_PROOFPOINT_SERVICE_SECRET>",
"PROOFPOINT_BASE_URL": "<YOUR_PROOFPOINT_BASE_URL>",
"MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
"AUTH_MODE": "<YOUR_AUTH_MODE>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}{
"servers": {
"proofpoint-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-technology/proofpoint-mcp:v1.0.4"
],
"env": {
"PROOFPOINT_SERVICE_PRINCIPAL": "<YOUR_PROOFPOINT_SERVICE_PRINCIPAL>",
"PROOFPOINT_SERVICE_SECRET": "<YOUR_PROOFPOINT_SERVICE_SECRET>",
"PROOFPOINT_BASE_URL": "<YOUR_PROOFPOINT_BASE_URL>",
"MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
"AUTH_MODE": "<YOUR_AUTH_MODE>",
"LOG_LEVEL": "<YOUR_LOG_LEVEL>"
}
}
}
}claude mcp add proofpoint-mcp --env PROOFPOINT_SERVICE_PRINCIPAL=<YOUR_PROOFPOINT_SERVICE_PRINCIPAL> --env PROOFPOINT_SERVICE_SECRET=<YOUR_PROOFPOINT_SERVICE_SECRET> --env PROOFPOINT_BASE_URL=<YOUR_PROOFPOINT_BASE_URL> --env MCP_TRANSPORT=<YOUR_MCP_TRANSPORT> --env AUTH_MODE=<YOUR_AUTH_MODE> --env LOG_LEVEL=<YOUR_LOG_LEVEL> -- docker run -i --rm ghcr.io/wyre-technology/proofpoint-mcp:v1.0.4Related MCP servers
MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.
View repository →Action1 MCP server — endpoint inventory, patch visibility, and policy automation via REST API.
View repository →MCP server for Alternative Payments — customers, invoices, payment requests, payouts, webhooks.
View repository →MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.
View repository →MCP server for the Auvik network monitoring API — devices, alerts, statistics, billing.
View repository →