MSP Claude Plugins

3CX - native PBX MCP server: directory/contacts, calls, queues, profiles, and PBX admin/diagnostics (V20 Update 10, Alpha)

Abnormal Security - AI-powered email security, phishing detection, account takeover prevention

Vendor-generic MSP automation workflows that adapt to the customer's connected stack.

Atera - tickets, agents, customers, alerts, SNMP/HTTP monitors

Auvik - network monitoring, device inventory, alerts, configurations, capacity planning across tenants

Kaseya Autotask PSA - tickets, CRM, projects, contracts, billing

Kaseya Quote Manager (Datto Commerce) - read-only quotes, sales orders, purchasing, catalog, CRM, org

Better Stack - uptime monitoring, logging, incident management

Blumira - SIEM findings management, device inventory, MSP multi-tenant operations, and security posture analysis

Checkpoint Harmony Email & Collaboration (Avanan) - quarantine and restore, threat event search, and allow/block-list exceptions

CIPP (CyberDrain Improved Partner Portal) - Microsoft 365 multi-tenant management for MSPs: tenants, users, mailboxes, conditional access, standards, BPA, licensing, GDAP, and alerts

Freshdesk - cloud helpdesk/PSA ticketing for MSPs: tickets, conversations, contacts, companies, knowledge base, SLA policies, and business hours

Inforcer - Microsoft 365 security baseline governance for MSPs: managed tenants, baseline templates, alignment/drift, secure scores, identity inventory, audit events, and assessment runs (read-only, plus one assessment-run action)

ConnectWise Automate - computers, clients, scripts, monitors, alerts

ConnectWise CPQ (Sell/Quosal) - quotes, line items, templates, quote customers, payment terms

ConnectWise PSA - tickets, companies, contacts, projects, time

Datto RMM - devices, alerts, jobs, patches, monitoring

Domotz - network monitoring, SNMP discovery, device management

HaloPSA - tickets, clients, assets, contracts (OAuth 2.0)

Hudu IT documentation - companies, assets, articles, passwords, websites

Huntress - managed threat detection, incident response, endpoint agent management, escalations, and billing reports

IT Glue - organizations, assets, passwords, flexible assets

Keeper Secrets Manager - read-only secret retrieval: KSM notation field queries, secret and folder discovery, masking semantics, TOTP, and least-privilege KSM application scoping

KnowBe4 - phishing simulation, security awareness training, user risk management

Liongard - environments, inspections, systems, detections, alerts, configuration monitoring

Microsoft 365 - users, mailboxes, Teams, OneDrive, licensing, and security posture

NinjaOne (NinjaRMM) - devices, organizations, alerts, tickets

PagerDuty - incident management, on-call scheduling, alerting

PandaDoc - documents, templates, e-signatures, and proposal management

Warmly visitor intelligence - identified website visitors, account-level engagement, and credit balance

Pax8 cloud marketplace - companies, products, subscriptions, orders, invoices

PostHog product analytics - insights, dashboards, feature flags, cohorts, events (read-only)

Proofpoint Email Protection - TAP, quarantine, threat intel, forensics, URL defense, VAP reports

Proofpoint Essentials - MSP org, domain, user, licensing, and reporting management

Oracle NetSuite ERP - records, reports, saved searches, and SuiteQL queries (read-only)

QuickBooks Online - customers, invoices, expenses, payments, reports

RocketCyber managed SOC - incidents, agents, events, threat detection

Rootly - incident management, postmortems, SRE automation

runZero - asset discovery, network scanning, inventory management

SalesBuildr CRM - contacts, companies, opportunities, quotes

SentinelOne XDR - threat detection, incident response, and endpoint agent management via the Purple AI MCP server

Sherweb Partner API - distributor billing, service provider management, customer subscriptions

SuperOps.ai - tickets, assets, clients, runbooks (GraphQL)

Syncro MSP - tickets, customers, assets, invoicing

Blackpoint Cyber / CompassOne MDR - tenants, assets, detections, vulnerabilities (dark web, external, scans)

SaaS Alerts - SaaS security monitoring and alerting for M365 / Google Workspace: alerts, events, anomaly detection, multi-tenant response

Crewhu - CSAT/NPS surveys, employee recognition, badges, prize redemptions for MSPs

ImmyBot - desired-state Windows software deployment, maintenance sessions, scripts (Entra ID OAuth)

TimeZest - tech scheduling against ConnectWise / Autotask / Halo PSA tickets

ThreatLocker - zero-trust application allowlisting, approval triage, audit log investigation, computer inventory

Kaseya VSA - endpoint monitoring, patch management, agent procedures, remote control (scaffolding)

Datto BCDR (SIRIS / Alto) - backup status, screenshot verification, recovery points (scaffolding)

Kaseya BMS PSA - tickets, accounts, contracts, time entries, billing (scaffolding)

Datto SaaS Protection (Backupify) - M365 / Google Workspace seat coverage, backup health, and seat licensing

Unitrends - appliances, backup jobs, recovery points, replication, alerts (scaffolding)

Spanning Cloud Backup - SaaS backup for M365 / Google Workspace / Salesforce (scaffolding)

HubSpot CRM - contacts, companies, deals, tickets, activities, and pipeline reporting (uses HubSpot's first-party MCP server)

SpamTitan by TitanHQ - quarantine queue management, email flow stats, sender allowlist/blocklist for MSPs

Xero accounting - contacts, invoices, payments, accounts, and financial reports

Alternative Payments - customers, invoices, hosted payment requests, transactions, payouts, and webhooks (read + safe writes)

Claude plugins for IRONSCALES - AI-powered anti-phishing, incident triage, email classification, and crowdsourced threat intelligence

Claude plugins for Mimecast Email Security - message tracking, threat intelligence, queue management, and email security operations

Claude plugins for Mailprotector email security - CloudFilter quarantine triage, allow/block rules, customer and domain onboarding, user syncs, and mail-flow auditing for MSPs

WYRE MSP Gateway client - cross-vendor orchestration agents (client-360, QBR prep, renewal-risk analysis, security-posture scoring, technician-performance coaching, incident war-room coordination, compliance evidence packaging, onboarding QA, gateway ops). Connects to conduit.wyre.ai.

Microsoft Graph Enterprise MCP - read-only natural-language queries over Microsoft Entra identity and directory data: users, groups, applications, devices, and admin reporting (public preview)

Azure MCP Server - read-only Azure observability, cost, and resource-health analysis in natural language: monitoring, pricing, quota, advisor, resource health, diagnostics

Stripe - payments, subscriptions, invoices, customer management via Stripe's first-party hosted MCP (mcp.stripe.com)

Slack - messages, channels, canvases, files, reactions via Slack's first-party hosted MCP (mcp.slack.com)

Meraki - Cisco's hosted Meraki MCP: read-only device health, inventory, firewall & VPN review, wireless

N-able N-central RMM - devices, org units, active issues, scheduled tasks, custom properties for on-prem and hosted servers

Nutanix - Prism Central v4 API: VM management, cluster operations, storage, networking via official Nutanix MCP server

MSP Operations — cross-vendor service-desk board health, dispatch prioritization, SLA monitoring, and shift handoffs across whatever PSA/RMM you have connected.

Security Operations — cross-vendor alert triage, containment playbooks, management-plane compromise investigation, ScreenConnect panel-abuse / rogue remote-access client response, and incident timelines across your EDR/MDR/SIEM and RMM stack.

Finance & Billing — agreement reconciliation, license true-up, and margin analysis across PSA, accounting, and distribution tools.

Compliance — evidence collection and control drift against CIS/SOC 2/HIPAA and cyber-insurance questionnaires.

Sales & Deal Desk — cross-vendor pipeline health, quote-to-close tracking, proposal follow-up, and warm-lead routing across whatever CRM, proposal, distribution, and scheduling tools you have connected.

MSP Marketing: anonymized case-study drafting from closed PSA work, with an approval step before any client is named, and review or referral request drafts from survey and ticket data, across whatever PSA, documentation, and survey tools you have connected.

DevOps & Reliability — cross-vendor on-call handoffs, incident postmortems, deploy health, and error-budget tracking across whatever incident-management and observability tools you have connected.

Cloud & Network Infrastructure — cross-vendor network and cloud infrastructure operations: device/network health, capacity planning, and cost management across whatever network monitoring and cloud platforms you have connected.

Security Awareness & Training — cross-vendor training completion tracking, phishing simulation results, and per-user risk scoring across whatever security-awareness training tools you have connected.

Backup & DR Assurance — cross-vendor backup job health monitoring, restore-test verification, retention/RPO compliance, and DR readiness across whatever backup and BCDR tools you have connected.

IT Asset Lifecycle — cross-vendor warranty tracking, end-of-life/end-of-support flagging, and hardware refresh-cycle planning across whatever RMM platforms and documentation tools you have connected.

Clio Manage — legal practice management: matters, contacts, time/expense activities, tasks, documents (metadata), calendar, and billing

ScalePad - asset lifecycle management, warranty services, client engagement roadmaps (Lifecycle Manager), compliance (ControlMap), backup monitoring (Backup Radar), and quoting (Quoter)

Axcient x360Recover - BCDR clients, devices, backup jobs, vaults, and appliances

KPN (Dutch telco) via the Grexx/IRMA interface - address availability and planned work, line diagnostics, and read-only business-mobile lookups (orders, SIM, usage, settings)

Anthropic Admin API - read-only review of a client's Anthropic org: seats, workspaces, API keys, spend, Claude Code adoption, and the compliance activity feed

OpenAI Admin API - read-only review of a client's OpenAI org: seats, projects, service accounts, API and Admin keys, usage and cost, rate limits, and the audit log

Jamf Pro - Mac and iOS inventory, FileVault and passcode compliance, patch posture, onboarding, and admin-gated lock/wipe/unmanage

Acronis Cyber Protect Cloud - backup health, protection coverage gaps, EDR incidents, and customer tenant, usage and MFA reporting

Bitwarden - read-only org audit: members, 2FA, groups, collection access metadata, policies, event log, and subscription (never vault items)

1Password Business - read-only audit events, shared-vault item usage, sign-in attempts and user inventory for offboarding and seat reviews (never vault contents)

Zabbix - read-only NOC problem triage, monitoring coverage and collector health, and customer SLA/availability reporting

LastPass Business and MSP - read-only leaver checks, MFA and security-score posture, privileged-access reviews, and license/billing reconciliation (no vault data)

Moovila - read-only project, budget, task, time entry and resource reporting for project profitability and billing reconciliation

Webroot (OpenText) GSM - read-only endpoint protection health, threat and DNS/web block review, seat reconciliation, and console audits

Cove Data Protection (N-able) - read-only backup health triage, customer and storage inventory, and console access review

Unitrends UniView - read-only cross-customer backup jobs, replication, BackupIQ alerts, appliance health, Endpoint Backup, and Spanning SaaS backup

GoGetSSL - read-only certificate expiry tracking, renewal prep (products, prices, DCV emails, CSR checks), and reseller balance and invoice reconciliation

SmileBack - read-only CSAT reviews, NPS responses and project surveys for QBR summaries, detractor follow-up and technician coaching

Kaseya myITprocess - read-only vCIO data: alignment scores and reviews, findings, roadmap recommendations and initiatives, and client meetings

Alga PSA - read-only ticket triage, client reviews, time sheet and invoice checks, and project status on your own Alga instance

Dubber call recording - capture coverage audits, call retrieval and tagging for disputes and QA, user lifecycle, and Dub.Point and webhook health

MSPCFO - MSP profitability from PSA data: client P&L, agreement health and pricing, and technician utilization (hosted MCP, OAuth sign-in)

MarketSharp CRM for home-improvement contractors - read-only customer lookup, lead and appointment pipeline, and sold-job and balance-due reporting