CIPP
MCP server for CIPP — M365 multi-tenant management for MSPs (users, tenants, policies).
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
ghcr.io/wyre-ai/cipp-mcp:v1.11.1claude mcp add cipp -e 'CIPP_API_URL=<CIPP_API_URL>' -e 'CIPP_CLIENT_ID=<CIPP_CLIENT_ID>' -e 'CIPP_CLIENT_SECRET=<your cipp_client_secret>' -e 'CIPP_TENANT_ID=<CIPP_TENANT_ID>' -e 'MCP_TRANSPORT=stdio' -e 'AUTH_MODE=env' -e 'LOG_LEVEL=info' -- docker run -i --rm ghcr.io/wyre-ai/cipp-mcp:v1.11.1
{
"mcpServers": {
"cipp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/wyre-ai/cipp-mcp:v1.11.1"
],
"env": {
"CIPP_API_URL": "<CIPP_API_URL>",
"CIPP_CLIENT_ID": "<CIPP_CLIENT_ID>",
"CIPP_CLIENT_SECRET": "<your cipp_client_secret>",
"CIPP_TENANT_ID": "<CIPP_TENANT_ID>",
"MCP_TRANSPORT": "stdio",
"AUTH_MODE": "env",
"LOG_LEVEL": "info"
}
}
}
}
Environment variables
CIPP_API_URLrequired Base URL of your CIPP API instance (e.g. https://cipp-api.example.com)CIPP_CLIENT_IDrequired Entra ID application (client) ID used to authenticate to CIPPCIPP_CLIENT_SECRETrequired secret Entra ID client secret for the CIPP applicationCIPP_TENANT_IDEntra ID tenant ID hosting the CIPP application registrationMCP_TRANSPORTTransport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.AUTH_MODECredential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.LOG_LEVELLog verbosity: debug, info, warn, error
Frequently asked questions
What is CIPP?
MCP server for CIPP — M365 multi-tenant management for MSPs (users, tenants, policies).
How do I install CIPP?
It runs on your machine. In Claude Code: claude mcp add cipp -e 'CIPP_API_URL=<CIPP_API_URL>' -e 'CIPP_CLIENT_ID=<CIPP_CLIENT_ID>' -e 'CIPP_CLIENT_SECRET=<your cipp_client_secret>' -e 'CIPP_TENANT_ID=<CIPP_TENANT_ID>' -e 'MCP_TRANSPORT=stdio' -e 'AUTH_MODE=env' -e 'LOG_LEVEL=info' -- docker run -i --rm ghcr.io/wyre-ai/cipp-mcp:v1.11.1. For other clients, paste the JSON configuration from this page into their MCP settings.
Does CIPP need an API key?
Yes. It expects CIPP_API_URL, CIPP_CLIENT_ID, CIPP_CLIENT_SECRET, which you set in its configuration.
Is CIPP open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains CIPP?
It is published by WYRE-AI. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.