English Français العربية

Ironscales

السجل الرسمي أخرى

MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.

الشيفرة المصدرية الموقع التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

OCI package ghcr.io/wyre-technology/ironscales-mcp:v1.2.1
Claude Code 
claude mcp add ironscales -e 'IRONSCALES_API_KEY=<your ironscales_api_key>' -e 'IRONSCALES_COMPANY_ID=<IRONSCALES_COMPANY_ID>' -e 'MCP_TRANSPORT=stdio' -e 'AUTH_MODE=env' -e 'LOG_LEVEL=info' -- docker run -i --rm ghcr.io/wyre-technology/ironscales-mcp:v1.2.1
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "ironscales": {
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--rm",
                "ghcr.io/wyre-technology/ironscales-mcp:v1.2.1"
            ],
            "env": {
                "IRONSCALES_API_KEY": "<your ironscales_api_key>",
                "IRONSCALES_COMPANY_ID": "<IRONSCALES_COMPANY_ID>",
                "MCP_TRANSPORT": "stdio",
                "AUTH_MODE": "env",
                "LOG_LEVEL": "info"
            }
        }
    }
}

متغيرات البيئة

  • IRONSCALES_API_KEY إلزامي سري Ironscales API key
  • IRONSCALES_COMPANY_ID إلزامي Ironscales company (tenant) identifier
  • MCP_TRANSPORT Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
  • AUTH_MODE Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
  • LOG_LEVEL Log verbosity: debug, info, warn, error

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. Ironscales MCP Server
  2. Interactive Incident Card (MCP Apps)
  3. Installation
  4. Configuration
  5. Usage
  6. Available Domains
  7. Development
  8. Contributing
  9. License

Ironscales MCP Server

A Model Context Protocol (MCP) server for Ironscales email security. Enables AI assistants to investigate phishing incidents, manage email classification, execute remediations, and view security statistics.

This is a Model Context Protocol (MCP) server that connects Claude (or any MCP-compatible AI) to your Ironscales environment.

Part of the MSP Claude Plugins ecosystem — a growing suite of AI integrations for the MSP stack. Built by MSPs, for MSPs.

Interactive Incident Card (MCP Apps)

ironscales_incidents_get renders as an interactive card in MCP Apps hosts (Claude Desktop/web) showing the phishing incident's subject, status, severity, sender, affected recipients, and threat indicators; plain-JSON behavior is unchanged in other hosts. The card is read-only — remediation stays with the model-driven remediation tools. It is neutral by default and brandable via window.__BRAND__ injection or MCP_BRAND_* env vars (MCP_BRAND_NAME, MCP_BRAND_LOGO_URL, MCP_BRAND_PRIMARY_COLOR, MCP_BRAND_ACCENT_COLOR, MCP_BRAND_BG, MCP_BRAND_TEXT) — no rebuild needed.

Installation

npm install @wyre-ai/ironscales-mcp

Configuration

Set the following environment variables:

VariableRequiredDescription
IRONSCALES_API_KEYYesYour Ironscales API key
IRONSCALES_COMPANY_IDYesYour Ironscales company ID
MCP_TRANSPORTNoTransport mode: stdio (default) or http

Usage

Running with Claude Desktop

Add to your Claude Desktop claude_desktop_config.json:

{
  "mcpServers": {
    "ironscales-mcp": {
      "command": "npx",
      "args": ["@wyre-ai/ironscales-mcp"],
      "env": {
        "IRONSCALES_API_KEY": "your-ironscales-api-key"
        "IRONSCALES_COMPANY_ID": "your-ironscales-company-id"
      }
    }
  }
}
Running with Claude Code (CLI)
claude mcp add ironscales-mcp \
  -e IRONSCALES_API_KEY=your-value \
  -e IRONSCALES_COMPANY_ID=your-value \
  -- npx -y @wyre-ai/ironscales-mcp
Docker
docker build -t ironscales-mcp .
docker run \
  -e IRONSCALES_API_KEY=your-value \
  -e IRONSCALES_COMPANY_ID=your-value \
  -p 8080:8080 ironscales-mcp

Available Domains

Allowlist

Manage email allowlists and blocklists

Email

Email investigation and classification

Incidents

Phishing incident management and triage

Remediation

Execute email remediations and quarantine

Stats

Security statistics and reporting

Development

# Clone the repository
git clone https://github.com/WYRE-AI/ironscales-mcp.git
cd ironscales-mcp

# Install dependencies
npm install

# Build
npm run build

# Run tests
npm test

Contributing

Contributions are welcome! Please see CONTRIBUTING.md if present, or open an issue to discuss changes.

License

Licensed under the Apache License, Version 2.0. See LICENSE for details.

الأسئلة الشائعة

ما هو Ironscales؟

MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.

كيف أثبّت Ironscales؟

يعمل على جهازك. في Claude Code: claude mcp add ironscales -e 'IRONSCALES_API_KEY=<your ironscales_api_key>' -e 'IRONSCALES_COMPANY_ID=<IRONSCALES_COMPANY_ID>' -e 'MCP_TRANSPORT=stdio' -e 'AUTH_MODE=env' -e 'LOG_LEVEL=info' -- docker run -i --rm ghcr.io/wyre-technology/ironscales-mcp:v1.2.1. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج Ironscales إلى مفتاح API؟

نعم. يتطلب IRONSCALES_API_KEY, IRONSCALES_COMPANY_ID، وتضبطها في إعداداته.

هل Ironscales مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص Apache-2.0.

من يصون Ironscales؟

ينشره wyre-technology. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.