Bitdefender GravityZone MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| AUTH_MODE | No | Authentication mode: env (default, reads BITDEFENDER_API_KEY and BITDEFENDER_ACCESS_URL) or gateway (credentials arrive per-request via headers). | env |
| LOG_LEVEL | No | Log level: debug | info (default) | warn | error. | info |
| MCP_TRANSPORT | No | Transport: stdio (default) or http. | stdio |
| CONDUIT_S2S_SECRET | No | When set, the HTTP transport requires a valid X-Gateway-S2S header on every /mcp request. | |
| BITDEFENDER_API_KEY | No | API key generated in Control Center, with the Network/Policies/Reports/Incidents areas selected. | |
| BITDEFENDER_ACCESS_URL | No | The account's Control Center Access URL (e.g. https://cloud.gravityzone.bitdefender.com). |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
| logging | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| bitdefender_list_endpointsA | List managed/unmanaged endpoints (computers, VMs, EC2 instances) - name, FQDN, IP, MAC addresses, AD SID, group, and installed-agent flags. Endpoint IDs from this response are required by bitdefender_get_endpoint. Scope to a group with parentId (from bitdefender_list_custom_groups); omit for the root of the Network Inventory. Returns a paginated envelope: page/pagesCount/perPage/total/items. |
| bitdefender_get_endpointA | Get full detail for one managed endpoint: power state, IP, last-seen timestamp, and the installed security agent's engine/product versions, license status, and update/outdated flags. Requires an endpoint ID from bitdefender_list_endpoints. |
| bitdefender_list_custom_groupsA | List the child groups directly under a group in the Network Inventory tree. Omit parentId to list the top-level 'Computers and Groups' and 'Deleted' groups. Group IDs from this response can be passed as parentId to bitdefender_list_endpoints and bitdefender_list_network_inventory. Returns a plain array (not a paginated envelope), each entry {id, name}. |
| bitdefender_list_network_inventoryA | List Network Inventory items (groups, computers, virtual machines, EC2 instances) under a container, with per-type detail. Broader than bitdefender_list_endpoints, which returns only endpoints - this also returns group nodes and lets you filter by item type. Returns a paginated envelope: page/pagesCount/perPage/total/items. |
| bitdefender_list_scan_tasksA | List previously created on-demand scan tasks and their status (1=Pending, 2=In progress, 3=Finished). Read-only - this connector never creates a scan task (createScanTask is excluded; see README's Scope section). Returns a paginated envelope: page/pagesCount/perPage/total/items. |
| bitdefender_list_policiesA | List security policies available to the account (id, name, owning company). Policy IDs from this response are required by bitdefender_get_policy. Returns a paginated envelope: page/pagesCount/perPage/total/items. |
| bitdefender_get_policyA | Get full detail for one security policy: creator, created/last-modified dates, and its complete settings object. Requires a policy ID from bitdefender_list_policies. |
| bitdefender_list_blocklist_itemsA | List file hashes present in the account's Blocklist - hash, hash algorithm (SHA256/MD5), source (incident/import/manual), source description, and filename where known. Read-only - this connector never adds to or removes from the Blocklist (addToBlocklist/removeFromBlocklist are excluded; see README's Scope section). Returns a paginated envelope: page/pagesCount/perPage/total/items. |
| bitdefender_list_reportsA | List scheduled/instant reports configured on the account - id, name, report type, and run occurrence (hourly/daily/weekly/monthly). Report IDs from this response are required by bitdefender_get_report_download_links. Returns a paginated envelope: page/pagesCount/perPage/total/items. |
| bitdefender_get_report_download_linksA | Check whether a report is ready for download and, if so, get its download URL(s) - readyForDownload, lastInstanceUrl (most recent instance), and allInstancesUrl (scheduled reports only). Both URLs require the same HTTP Basic auth as the API itself (API key as username, empty password) and return a CSV+PDF archive. Requires a report ID from bitdefender_list_reports. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 10 tools
Most tools are clearly distinct by resource type and action, but list_endpoints and list_network_inventory overlap somewhat in what they return. The descriptions explicitly disambiguate them, so confusion is unlikely but possible.
All tool names follow a consistent bitdefender_<verb>_<noun> pattern, using only list and get verbs. This makes the API predictable and easy to navigate.
With 10 read-only tools covering endpoints, groups, inventory, scan tasks, policies, blocklist, and reports, the surface is well-scoped for a read-only GravityZone connector. No tool feels redundant or extraneous.
The server covers the main read-only visibility use cases for Bitdefender GravityZone, with list/get pairs for endpoints and policies plus list-only surfaces for scans, blocklist, and reports. Minor gaps exist, such as no detailed scan-task view or single blocklist-item lookup, but the core workflows are supported.