Security 🧪 Community ✓ Claude Code ✓ Claude Desktop Standalone • Lastpass
Lastpass
LastPass Business and MSP - read-only leaver checks, MFA and security-score posture, privileged-access reviews, and license/billing reconciliation (no vault data)
Installation
Install this plugin individually:
/plugin marketplace add wyre-technology/msp-claude-plugins --plugin lastpass Or install all MSP plugins at once:
/plugin marketplace add wyre-technology/msp-claude-plugins Features
- Msp Billing
- Offboarding Review
- Privileged Access
- Security Posture
Skills
This plugin provides 5 skills that teach Claude about Lastpass:
| Skill | Description |
|---|---|
msp-billing | Reconciling LastPass MSP license consumption: billing cycles, the per-company billing report (`dailyAverageLicenseCount`, `licenseType`, `addons`), managed-company license limits and active/suspended status, and matching all of it against what the MSP bills each client in the PSA. |
offboarding-review | Leaver access review in LastPass: finding a departing user in the MSP's own company or a client company, reading their account status, admin level and group memberships, catching a pending invite that was never revoked, and producing the checklist of actions a LastPass admin must take in the Admin Console, because this connector cannot disable or remove anyone. |
privileged-access | Reviewing who holds LastPass admin rights: admin levels (RBAC roles) and their permissions, the users in each level, the MSP cross-tenant admin-user report, and how to cross-check admins for MFA, dormancy and leaver status. |
security-posture | Per-client LastPass account hygiene from user records: MFA coverage (`advancedMfaStatus`, `enabledMfa`), weak Security Challenge and master-password scores, stale master passwords, dormant enrolled accounts, invitations that never converted, and how to roll those into a client-facing posture summary. |
api-patterns | The LastPass Business and MSP admin tool surface as exposed through Conduit: the 23 read-only tools and their Conduit tier, Business key versus MSP key scope, the `X-LastPass-API-Key` header, `max_results` / `page_token` pagination, wildcard and `[from:to]` range filters, the users LastPass silently omits from lists, the user record fields, and the error vocabulary (401 early access, 403 wrong key type, 429 shared limits, oversize pages). |
Agents
This plugin provides 1 agent for autonomous task execution:
| Agent | Description |
|---|---|
posture-sweep | Use this agent when an MSP security lead or vCIO needs a LastPass posture review across every managed client in one pass - admins, MFA coverage, weak scores, dormant accounts and unconverted invites - ranked so the worst clients surface first. |
Commands
Available slash commands:
| Command | Description |
|---|
API Reference
| Base URL | |
| Authentication | |
| Rate Limit | |
| Documentation |
Example Usage
Using Skills
/skill lastpass:msp-billing
Reconciling LastPass MSP license consumption: billing cycles, the per-company billing report (`dailyAverageLicenseCount`, `licenseType`, `addons`), managed-company license limits and active/suspended status, and matching all of it against what the MSP bills each client in the PSA.