knowbe4-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| MCP_TRANSPORT | No | Transport mode: stdio or http | stdio |
| KNOWBE4_REGION | No | API region: us, eu, ca, uk, de | us |
| KNOWBE4_API_KEY | Yes | Your KnowBe4 API key | |
| KNOWBE4_BASE_URL | No | Custom base URL (overrides region) |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
| resources | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| knowbe4_navigateA | Discover available KnowBe4 tools by domain. Returns tool names and descriptions for the selected domain. All tools are callable at any time — this is a help/discovery aid, not a prerequisite. |
| knowbe4_backC | No-op tool for backwards compatibility. All tools are always available. |
| knowbe4_statusC | Show credentials status and available domains. Also verifies API credentials are configured. |
| knowbe4_account_getA | Get KnowBe4 account information including subscription level, number of seats, admin details, and current risk score. |
| knowbe4_account_risk_score_historyB | Get the account-level risk score history over time. Useful for tracking overall security posture improvement. |
| knowbe4_users_listA | List KnowBe4 users with optional filtering by status or group. Returns paginated results including email, name, risk score, and department. |
| knowbe4_users_getA | Get detailed information about a specific KnowBe4 user by ID, including their risk score, phish-prone percentage, training status, and group memberships. |
| knowbe4_users_risk_score_historyB | Get a specific user's risk score history over time. Useful for tracking individual improvement in security awareness. |
| knowbe4_groups_listA | List all KnowBe4 groups. Returns group names, member counts, and current risk scores. |
| knowbe4_groups_getB | Get detailed information about a specific KnowBe4 group by ID, including risk score and member count. |
| knowbe4_groups_membersB | Get all members of a specific group. Returns user details for each member. |
| knowbe4_groups_risk_score_historyB | Get a group's risk score history over time. Useful for comparing security posture across departments or teams. |
| knowbe4_phishing_campaigns_listB | List all phishing simulation campaigns. Returns campaign names, status, creation dates, and associated security test counts. |
| knowbe4_phishing_campaigns_getB | Get detailed information about a specific phishing campaign by ID, including all associated security tests. |
| knowbe4_phishing_security_tests_listA | List all Phishing Security Tests (PSTs) across all campaigns. Returns test status, phish-prone percentage, and recipient counts. |
| knowbe4_phishing_campaign_testsC | List all Phishing Security Tests (PSTs) for a specific campaign. |
| knowbe4_phishing_security_test_getA | Get detailed results for a specific Phishing Security Test (PST) by ID. Includes phish-prone percentage, clicked/opened/reported counts. |
| knowbe4_phishing_security_test_recipientsB | Get recipient-level results for a specific PST. Shows which users clicked, opened, reported, or were otherwise affected. |
| knowbe4_phishing_security_test_recipientB | Get a specific recipient's detailed result for a PST, including click time, open time, and reported status. |
| knowbe4_training_campaigns_listC | List all training campaigns. Returns campaign names, status, enrollment counts, and completion rates. |
| knowbe4_training_campaigns_getA | Get detailed information about a specific training campaign by ID, including modules, enrollments, and completion statistics. |
| knowbe4_training_enrollments_listB | List all training enrollments. Shows which users are enrolled in which training modules and their completion status. |
| knowbe4_training_enrollments_getB | Get detailed information about a specific training enrollment by ID, including module progress and completion date. |
| knowbe4_store_purchases_listC | List all store purchases (training content bought from the KnowBe4 ModStore). Shows purchased modules and content. |
| knowbe4_store_purchases_getB | Get detailed information about a specific store purchase by ID. |
| knowbe4_policies_listC | List all security policies. Returns policy names, status, and acknowledgment requirements. |
| knowbe4_policies_getC | Get detailed information about a specific policy by ID, including acknowledgment status. |
| knowbe4_reporting_phishing_summaryA | Get a summary of all phishing security tests including overall phish-prone percentage, total tests run, and aggregate click/open/report rates. Fetches all PSTs and computes statistics. |
| knowbe4_reporting_training_summaryB | Get a summary of all training campaigns including total enrollments, completion counts, and overall completion rate. |
| knowbe4_reporting_risk_overviewA | Get an overview of account risk posture including current risk score, recent risk score trend, and highest-risk groups. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| KnowBe4 User Card | Interactive MCP Apps card rendering a KnowBe4 user's security-awareness profile |
TDQS
Scored across 30 tools
Each tool targets a distinct resource (campaigns, security tests, recipients, training, groups, users, reporting) with clear specificity. Tools like phishing_security_tests_list vs phishing_campaign_tests are differentiated by scope (all tests vs per-campaign), and the naming plus descriptions make boundaries clear.
All tools follow a consistent knowbe4_<domain>_<resource>_<action> pattern. The hierarchy is predictable: domain prefixes (phishing, training, users, groups, reporting) followed by singular/plural resource nouns and consistent verbs (list, get, members). The only minor deviation is the utility tools (navigate, back, status) which break the pattern but are intentional.
30 tools is on the heavy side, but KnowBe4 is a broad platform covering phishing, training, users, groups, reporting, and account data. Each tool covers a genuinely distinct resource that an agent would query. It leans toward the upper edge of reasonable scope, though several reporting summary tools aggregate data that could be computed from existing list tools, suggesting some redundancy.
The surface covers the primary KnowBe4 domains well: phishing campaigns/tests/recipients, training, users, groups, store purchases, and policies. However, the toolset is entirely read-only — there are no create, update, or delete tools for any resource, which means agents cannot trigger phishing simulations, enroll users, or modify campaigns. This limits it to a querying/analysis server.