Sophos XGS MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SOPHOS_HOST | No | Sophos XGS firewall hostname or IP address | |
| SOPHOS_PORT | No | Sophos API port (default 4444) | 4444 |
| SOPHOS_PASSWORD | No | API password | |
| SOPHOS_USERNAME | No | API username |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_firewall_rulesA | List all firewall rules with zones, actions, and status |
| list_firewall_rule_groupsB | List firewall rule groups |
| list_ip_hostsA | List all IP host objects (addresses, networks, ranges) |
| list_ip_host_groupsB | List IP host groups |
| list_fqdn_hostsB | List FQDN (domain name) host objects |
| list_fqdn_host_groupsA | List FQDN host groups |
| list_servicesB | List service definitions (ports and protocols) |
| list_service_groupsD | List service groups |
| list_zonesA | List network zones and their configurations |
| list_interfacesA | List network interfaces and their configurations |
| list_vlansC | List VLAN configurations |
| list_acl_rulesB | List local service ACL rules (device access control) |
| list_dns_forwardersA | List DNS forwarder configurations |
| list_ips_policiesB | List Intrusion Prevention System (IPS) policies |
| list_web_filter_policiesC | List web filter policies |
| list_url_groupsB | List URL groups used in web filtering |
| list_usersB | List user accounts |
| list_admin_profilesC | List administrator profiles and their permissions |
| get_admin_settingsA | Get admin settings (hostname, web admin, login security, password complexity) |
| get_admin_authenA | Get admin authentication settings |
| list_syslog_serversC | List configured syslog servers |
| list_notificationsB | List notification configurations |
| get_backup_configC | Get backup configuration settings |
| get_reports_retentionB | Get reports data retention settings |
| list_snmpv3_usersA | List SNMPv3 user configurations |
| get_user_activityC | Get user activity/session information |
| list_nat_rulesA | List NAT rules (DNAT, SNAT, MASQ, loopback, reflexive) |
| list_smtp_policiesA | List SMTP email policies per domain (spam protection, malware scanning, file type filters, routing) |
| list_sslvpn_policiesA | List SSL VPN tunnel policies (members, permitted networks, gateway settings) |
| list_vpn_ipsec_connectionsA | List IPsec VPN connections (site-to-site, host-to-host, tunnel interfaces, status) |
| list_sdwan_policy_routesB | List SD-WAN policy routes (source/destination network mappings, profiles) |
| list_sdwan_profilesA | List SD-WAN profiles (gateway preferences, health checks, SLA settings) |
| list_gateway_hostsA | List WAN gateway hosts (interfaces, health check, monitoring) |
| list_dhcp_serversA | List DHCP server scopes (IP ranges, DNS, lease times, options) |
| list_mac_hostsB | List MAC address host objects |
| list_static_routesB | List static/unicast routes |
| list_ssl_tls_inspection_rulesB | List SSL/TLS inspection rules (decrypt/do not decrypt actions) |
| get_ssl_tls_inspection_settingsA | Get SSL/TLS inspection engine settings (CA, TLS versions) |
| list_decryption_profilesA | List decryption profiles (cipher settings, certificate validation) |
| list_web_filter_exceptionsA | List web filter exceptions (URL regex, scan bypass rules) |
| list_gateway_configurationsA | List WAN gateway configurations (failover, health checks) |
| list_dns_request_routesB | List DNS request routes (conditional forwarding) |
| list_dns_host_entriesB | List DNS host entries (local DNS records) |
| list_schedulesA | List time schedule profiles |
| list_access_time_policiesA | List access time policies (internet access time restrictions) |
| list_surfing_quota_policiesB | List surfing quota policies (time-based internet quotas) |
| list_data_transfer_policiesB | List data transfer policies (bandwidth quotas) |
| get_captive_portalB | Get default captive portal template and settings |
| list_local_service_aclA | List local service ACL rules (device access from WAN/zones) |
| list_interface_aliasesA | List interface aliases (additional IPs on interfaces) |
| list_lag_interfacesB | List link aggregation group (LAG) interfaces |
| list_router_advertisementsA | List IPv6 router advertisement servers |
| get_pim_settingsA | Get PIM-SM dynamic multicast routing settings |
| get_time_settingsA | Get timezone and NTP server settings |
| get_backup_restore_settingsA | Get scheduled backup configuration (frequency, destination) |
| get_firewall_ruleA | Get a specific firewall rule by name |
| get_ip_hostB | Get a specific IP host by name |
| get_zoneA | Get a specific zone by name |
| get_interfaceB | Get a specific network interface by name |
| get_serviceA | Get a specific service definition by name |
| search_ip_hostsA | Search IP hosts by name pattern (using 'like' operator) |
| search_firewall_rulesB | Search firewall rules by name pattern (using 'like' operator) |
| raw_api_queryB | Execute a raw API GET query for any entity (advanced usage) |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Leon69924/sophos-xgs-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server