PluginBench
MCP Server

SentinelOne (Purple) MCP Server

io.github.wyre-technology/sentinelone-mcp

RepositoryRegistry

What is the SentinelOne (Purple) MCP server?

Multitenant Streamable HTTP wrapper for the SentinelOne purple-mcp server.

How to install SentinelOne (Purple)

Copy-paste configuration for popular MCP clients.

transport: stdio
Config generated by PluginBench — verify against the source before use.
Environment / auth
  • PORT

    Public listen port for the proxy (POST /mcp, GET /health)

  • IDLE_EVICT_MS

    Idle tenant timeout before a purple-mcp child is evicted (ms)

  • SPAWN_READY_TIMEOUT_MS

    How long to wait for a spawned child to start serving HTTP (ms)

  • LOG_LEVEL

    Fastify log level: debug, info, warn, error

Claude Desktop
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "sentinelone-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/sentinelone-mcp:v1.0.2"
      ],
      "env": {
        "PORT": "<YOUR_PORT>",
        "IDLE_EVICT_MS": "<YOUR_IDLE_EVICT_MS>",
        "SPAWN_READY_TIMEOUT_MS": "<YOUR_SPAWN_READY_TIMEOUT_MS>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
Cursor
~/.cursor/mcp.json
{
  "mcpServers": {
    "sentinelone-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/sentinelone-mcp:v1.0.2"
      ],
      "env": {
        "PORT": "<YOUR_PORT>",
        "IDLE_EVICT_MS": "<YOUR_IDLE_EVICT_MS>",
        "SPAWN_READY_TIMEOUT_MS": "<YOUR_SPAWN_READY_TIMEOUT_MS>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
Windsurf
~/.codeium/windsurf/mcp_config.json
{
  "mcpServers": {
    "sentinelone-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/sentinelone-mcp:v1.0.2"
      ],
      "env": {
        "PORT": "<YOUR_PORT>",
        "IDLE_EVICT_MS": "<YOUR_IDLE_EVICT_MS>",
        "SPAWN_READY_TIMEOUT_MS": "<YOUR_SPAWN_READY_TIMEOUT_MS>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
VS Code
.vscode/mcp.json
{
  "servers": {
    "sentinelone-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/sentinelone-mcp:v1.0.2"
      ],
      "env": {
        "PORT": "<YOUR_PORT>",
        "IDLE_EVICT_MS": "<YOUR_IDLE_EVICT_MS>",
        "SPAWN_READY_TIMEOUT_MS": "<YOUR_SPAWN_READY_TIMEOUT_MS>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
Claude Code
claude mcp add sentinelone-mcp --env PORT=<YOUR_PORT> --env IDLE_EVICT_MS=<YOUR_IDLE_EVICT_MS> --env SPAWN_READY_TIMEOUT_MS=<YOUR_SPAWN_READY_TIMEOUT_MS> --env LOG_LEVEL=<YOUR_LOG_LEVEL> -- docker run -i --rm ghcr.io/wyre-technology/sentinelone-mcp:v1.0.2

Related MCP servers

Abnormal Security

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

View repository →

Action1

Action1 MCP server — endpoint inventory, patch visibility, and policy automation via REST API.

View repository →

Alternative Payments

MCP server for Alternative Payments — customers, invoices, payment requests, payouts, webhooks.

View repository →

Atera

MCP server for Atera RMM — customers, tickets, and more.

View repository →

Autotask

MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.

View repository →

Auvik

MCP server for the Auvik network monitoring API — devices, alerts, statistics, billing.

View repository →