Security 🧪 Community ✓ Claude Code ✓ Claude Desktop Standalone • Webroot
Webroot
Webroot (OpenText) GSM - read-only endpoint protection health, threat and DNS/web block review, seat reconciliation, and console audits
Installation
Install this plugin individually:
/plugin marketplace add wyre-technology/msp-claude-plugins --plugin webroot Or install all MSP plugins at once:
/plugin marketplace add wyre-technology/msp-claude-plugins Features
- Console Audit
- Endpoint Health
- Threat Review
- Usage Reconciliation
Skills
This plugin provides 5 skills that teach Claude about Webroot:
| Skill | Description |
|---|---|
console-audit | Webroot GSM console access and agent-command audit using the four admin-gated tools: console and per-site administrators with their roles (names, emails, phone numbers), and the history of agent commands (scan, cleanup, uninstall, changekeycode, restart, deactivate, reactivate, sysisolate) with command states. |
endpoint-health | Webroot endpoint protection posture triage: console-wide and per-site statistics (infected, needs attention, active threats), stale agents by last seen, outdated agent versions, endpoints on detect-only or unmanaged policies, SkyStatus agent status classes, and coverage gaps against the site's expected device count. |
threat-review | Webroot detection review for a site or endpoint: threat history (file, path, malware group, first/last seen), repeat infections, Web Threat Shield URL actions, and DNS Protection traffic and blocked domains, with explicit date windows and paging. |
usage-reconciliation | Webroot seat and usage reconciliation for MSP billing: the per-site usage report and its three report types, console seats allowed vs. deployed, per-site devices allowed vs. total endpoints, trial, expiring, suspended and deactivated sites, and how to compare the result with PSA agreement quantities. |
api-patterns | Webroot Unity API fundamentals through Conduit: the five X-Webroot-* headers and the console-user password grant behind them, the GSM key bound to the connection, the 25 read-only tools and which four Conduit admin-gates, the three paging styles (PageNr/TotalAvailable, PageNr/MoreAvailable, ContinuationToken), siteId vs. site keycode, date-range defaults, error statuses, and response size limits. |
Agents
This plugin provides 1 agent for autonomous task execution:
| Agent | Description |
|---|---|
site-security-reviewer | Use this agent for a monthly or QBR security review of one Webroot customer site: protection health, stale and outdated agents, policy posture, threat history and DNS/web blocks for the period, seat usage against devices allowed, and (when the user has Admin access to Webroot in Conduit) agent command history and site admin access. |
Commands
Available slash commands:
| Command | Description |
|---|
API Reference
| Base URL | |
| Authentication | |
| Rate Limit | |
| Documentation |
Example Usage
Using Skills
/skill webroot:console-audit
Webroot GSM console access and agent-command audit using the four admin-gated tools: console and per-site administrators with their roles (names, emails, phone numbers), and the history of agent commands (scan, cleanup, uninstall, changekeycode, restart, deactivate, reactivate, sysisolate) with command states.