forcepointDSC-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| APP_NAME | Yes | Naming root for Vault paths and Postgres table name | |
| VAULT_ADDR | Yes | Vault server address | |
| POSTGRES_DB | Yes | PostgreSQL database name | |
| VAULT_TOKEN | Yes | Vault authentication token | |
| POSTGRES_HOST | Yes | PostgreSQL host | |
| POSTGRES_PORT | Yes | PostgreSQL port | |
| POSTGRES_USER | Yes | PostgreSQL user | |
| POSTGRES_PASSWORD | Yes | PostgreSQL password | |
| MCP_ADMIN_AUTH_KEY | No | Optional admin key enforced for all mutating tools | |
| MCP_CONFIG_DEFAULT_USER_ID | No | Default user scope when userId is omitted | |
| FORCEPOINT_DEFAULT_BASE_URL | No | Forcepoint portal base URL fallback | |
| FORCEPOINT_DEFAULT_TIMEOUT_MS | No | Forcepoint request timeout fallback (milliseconds) | |
| FORCEPOINT_CONFIG_BASE_URL_KEY | No | Postgres key for per-user base URL | |
| MCP_HTTP_VAULT_TOKEN_INDEX_PATH | No | Shared multi-user Vault index for MCP HTTP bearer tokens | |
| FORCEPOINT_CONFIG_TIMEOUT_MS_KEY | No | Postgres key for per-user timeout | |
| FORCEPOINT_DEFAULT_USER_API_VERSION | No | Default user read API version (v2 or v2.1) | |
| FORCEPOINT_CONFIG_USER_API_VERSION_KEY | No | Postgres key for per-user user-read API version | |
| FORCEPOINT_VAULT_USER_AUTH_SECRET_SUFFIX | No | Vault suffix for per-user Forcepoint auth secrets |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| forcepoint_query_suggestionA | Suggest Forcepoint MCP tool sequences, safety checks, and rich tool schemas for a workflow intent. Read-only; use for schema discovery and planning. |
| forcepoint_connection_infoA | Return Forcepoint MCP runtime defaults, authentication model, docs references, and persistence wiring. Read-only. |
| forcepoint_scope_infoB | Return user-scoped Postgres and Vault paths used by this Forcepoint MCP solution. Read-only. |
| forcepoint_endpoint_inventoryA | Return the documented Forcepoint endpoint catalog and generated OpenAPI inventory metadata. Read-only. |
| forcepoint_connection_config_getA | Read Postgres-backed Forcepoint connection configuration for one user scope. Read-only. |
| forcepoint_connection_config_setA | Persist Forcepoint base URL, timeout, or preferred user API version for one user scope. Mutating; requires authorizationKey when admin auth is enabled. |
| forcepoint_user_token_getA | Read metadata about the Vault-backed Forcepoint credential for one user scope. Read-only; secret values remain redacted. |
| forcepoint_user_token_setA | Store a user-scoped Forcepoint bearer token or basic-auth credential in Vault. Mutating and high-risk; requires authorizationKey when admin auth is enabled. |
| forcepoint_user_token_deleteA | Delete the Vault-backed Forcepoint credential for one user scope. Mutating and high-risk; requires authorizationKey when admin auth is enabled. |
| forcepoint_mcp_http_token_getA | List user-scoped MCP HTTP bearer-token metadata stored in Vault. Read-only. |
| forcepoint_mcp_http_token_upsertB | Create or update a user-scoped MCP HTTP bearer token stored in Vault. Mutating and high-risk; requires authorizationKey when admin auth is enabled. |
| forcepoint_mcp_http_token_revokeA | Revoke a user-scoped MCP HTTP bearer token by tokenId. Mutating and high-risk; requires authorizationKey when admin auth is enabled. |
| forcepoint_health_checkB | Verify Forcepoint reachability and stored credentials using the documented group-list read endpoint. Read-only. |
| forcepoint_user_create_or_updateC | Create or update a Forcepoint user through the documented Config API. Mutating; requires authorizationKey when admin auth is enabled. |
| forcepoint_user_deactivateA | Deactivate a Forcepoint user. Mutating and potentially disruptive; requires authorizationKey when admin auth is enabled. |
| forcepoint_user_reactivateA | Reactivate a Forcepoint user. Mutating; requires authorizationKey when admin auth is enabled. |
| forcepoint_user_deleteA | Delete a deactivated Forcepoint user. High-risk mutation; requires authorizationKey when admin auth is enabled. |
| forcepoint_user_getB | Read Forcepoint user details via Config API v2 or v2.1. Read-only. |
| forcepoint_group_create_or_updateB | Create a Forcepoint group or rename an existing group. Mutating; requires authorizationKey when admin auth is enabled. |
| forcepoint_group_deleteA | Delete a Forcepoint group. High-risk mutation; requires authorizationKey when admin auth is enabled. |
| forcepoint_group_add_membersB | Add existing users to a Forcepoint group. Mutating; requires authorizationKey when admin auth is enabled. |
| forcepoint_group_remove_membersA | Remove users from a Forcepoint group. Mutating; requires authorizationKey when admin auth is enabled. |
| forcepoint_group_listA | List Forcepoint groups for the selected user scope. Read-only. |
| forcepoint_group_getB | Read Forcepoint group details, member status slice, and pagination metadata. Read-only. |
| forcepoint_api_requestA | Execute a generic Forcepoint API request using the selected user’s Vault-backed credential. Use only when no dedicated tool fits. Mutating calls require authorizationKey when admin auth is enabled. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/LesterAJohn/forcepointDSC-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server