Sophos XGS MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SOPHOS_HOST | No | Sophos XGS firewall hostname or IP address | |
| SOPHOS_PORT | No | Sophos API port (default 4444) | 4444 |
| SOPHOS_PASSWORD | No | API password | |
| SOPHOS_USERNAME | No | API username |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_firewall_rulesA | List all firewall rules with zones, actions, and status |
| list_firewall_rule_groupsB | List firewall rule groups |
| list_ip_hostsA | List all IP host objects (addresses, networks, ranges) |
| list_ip_host_groupsB | List IP host groups |
| list_fqdn_hostsB | List FQDN (domain name) host objects |
| list_fqdn_host_groupsA | List FQDN host groups |
| list_servicesB | List service definitions (ports and protocols) |
| list_service_groupsD | List service groups |
| list_zonesA | List network zones and their configurations |
| list_interfacesA | List network interfaces and their configurations |
| list_vlansC | List VLAN configurations |
| list_acl_rulesB | List local service ACL rules (device access control) |
| list_dns_forwardersA | List DNS forwarder configurations |
| list_ips_policiesB | List Intrusion Prevention System (IPS) policies |
| list_web_filter_policiesC | List web filter policies |
| list_url_groupsB | List URL groups used in web filtering |
| list_usersB | List user accounts |
| list_admin_profilesC | List administrator profiles and their permissions |
| get_admin_settingsA | Get admin settings (hostname, web admin, login security, password complexity) |
| get_admin_authenA | Get admin authentication settings |
| list_syslog_serversC | List configured syslog servers |
| list_notificationsB | List notification configurations |
| get_backup_configC | Get backup configuration settings |
| get_reports_retentionB | Get reports data retention settings |
| list_snmpv3_usersA | List SNMPv3 user configurations |
| get_user_activityC | Get user activity/session information |
| list_nat_rulesA | List NAT rules (DNAT, SNAT, MASQ, loopback, reflexive) |
| list_smtp_policiesA | List SMTP email policies per domain (spam protection, malware scanning, file type filters, routing) |
| list_sslvpn_policiesA | List SSL VPN tunnel policies (members, permitted networks, gateway settings) |
| list_vpn_ipsec_connectionsA | List IPsec VPN connections (site-to-site, host-to-host, tunnel interfaces, status) |
| list_sdwan_policy_routesB | List SD-WAN policy routes (source/destination network mappings, profiles) |
| list_sdwan_profilesA | List SD-WAN profiles (gateway preferences, health checks, SLA settings) |
| list_gateway_hostsA | List WAN gateway hosts (interfaces, health check, monitoring) |
| list_dhcp_serversA | List DHCP server scopes (IP ranges, DNS, lease times, options) |
| list_mac_hostsB | List MAC address host objects |
| list_static_routesB | List static/unicast routes |
| list_ssl_tls_inspection_rulesB | List SSL/TLS inspection rules (decrypt/do not decrypt actions) |
| get_ssl_tls_inspection_settingsA | Get SSL/TLS inspection engine settings (CA, TLS versions) |
| list_decryption_profilesA | List decryption profiles (cipher settings, certificate validation) |
| list_web_filter_exceptionsA | List web filter exceptions (URL regex, scan bypass rules) |
| list_gateway_configurationsA | List WAN gateway configurations (failover, health checks) |
| list_dns_request_routesB | List DNS request routes (conditional forwarding) |
| list_dns_host_entriesB | List DNS host entries (local DNS records) |
| list_schedulesA | List time schedule profiles |
| list_access_time_policiesA | List access time policies (internet access time restrictions) |
| list_surfing_quota_policiesB | List surfing quota policies (time-based internet quotas) |
| list_data_transfer_policiesB | List data transfer policies (bandwidth quotas) |
| get_captive_portalB | Get default captive portal template and settings |
| list_local_service_aclA | List local service ACL rules (device access from WAN/zones) |
| list_interface_aliasesA | List interface aliases (additional IPs on interfaces) |
| list_lag_interfacesB | List link aggregation group (LAG) interfaces |
| list_router_advertisementsA | List IPv6 router advertisement servers |
| get_pim_settingsA | Get PIM-SM dynamic multicast routing settings |
| get_time_settingsA | Get timezone and NTP server settings |
| get_backup_restore_settingsA | Get scheduled backup configuration (frequency, destination) |
| get_firewall_ruleA | Get a specific firewall rule by name |
| get_ip_hostB | Get a specific IP host by name |
| get_zoneA | Get a specific zone by name |
| get_interfaceB | Get a specific network interface by name |
| get_serviceA | Get a specific service definition by name |
| search_ip_hostsA | Search IP hosts by name pattern (using 'like' operator) |
| search_firewall_rulesB | Search firewall rules by name pattern (using 'like' operator) |
| raw_api_queryB | Execute a raw API GET query for any entity (advanced usage) |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Leon69924/sophos-xgs-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server