Skip to main content
Glama
deenesjakoruzh
JohnGilligan2

trmm-action-mcp

by JohnGilligan2
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

trmm-action-mcp

A gated, allow-listed action server for Tactical RMM. Unlike the read-only trmm-mcp server, this one can act on endpoints — but only by running a vetted, read-only audit from a fixed catalog. There is deliberately no tool to run arbitrary code and no tool to delete, edit, reboot, or uninstall anything.

Built for a small group of senior engineers (e.g. the approved engineers) to run audits like "list Domain Admins on EF-DC01" from Claude.

Why it's safe — six independent guardrails

  1. Identity — reachable only by the named senior engineers.

  2. Network — nginx allows only Anthropic's connector egress IPs (+ your IPs).

  3. Bearer — shared secret between the edge and this backend.

  4. Restricted tools — only list_agents, list_audits, run_audit.

  5. Allow-listed audits — run_audit runs only vetted read-only scripts in catalog.py; no arbitrary-code path exists.

  6. Scoped TRMM key — the claude-actions role can Send-Command + read, nothing else. Every run is TRMM-audit-logged.

"Can't delete stuff" is a guarantee here (allow-listed catalog + no delete tools + scoped key), not a hope — see the note in catalog.py.

Related MCP server: firewalla-mcp-server

Tools

Tool

Kind

What it does

trmm_list_agents

read

Find the agent to target (filter by client/site/type/platform/status/hostname).

trmm_list_audits

read

The catalog of runnable audits (the only scripts run_audit will execute).

trmm_run_audit

action

Run ONE vetted audit on ONE agent; returns its output. readOnlyHint:false.

Audit catalog (v1)

privileged_groups (DC), local_admins, local_users, disk_space, os_info, installed_software, services_not_running, pending_reboot, hotfixes, logged_on_users, bitlocker, network_config. All read-only. Add more by vetting a new entry in catalog.py.

Configuration

Variable

Required

Description

TRMM_API_URL

✅

TRMM API base URL (api. subdomain).

TRMM_ACTION_API_KEY

✅

The scoped claude-actions key (Send-Command + read only).

TRMM_MCP_TRANSPORT

—

stdio (default) or http.

TRMM_MCP_AUTH_TOKEN

http only

Shared bearer between edge and backend.

TRMM_MCP_HOST / PORT / PATH

—

Default 0.0.0.0 / 8090 / /mcp (in Docker).

TRMM_TIMEOUT / TRMM_VERIFY_SSL / TRMM_MAX_RETRIES

—

Tuning.

Run

python -m venv .venv && .venv\Scripts\activate   # or source .venv/bin/activate
pip install -r requirements.txt
# stdio (local dev): set TRMM_API_URL + TRMM_ACTION_API_KEY, then:
python -m trmm_action_mcp

Deploy (gated, remote)

See docs/DEPLOY.md (Docker + nginx Anthropic-IP allowlist + identity options) and docs/TRMM_ROLE.md (the scoped key). The senior-engineer path that works today is Claude Code/Desktop + bearer behind the nginx allowlist; per-user Entra SSO for claude.ai web/mobile is best done via Cloudflare Access (see the read-only project) — DEPLOY.md explains the trade-offs.

Relationship to trmm-mcp

Separate project, separate key, separate deploy on purpose: the read-only server stays incapable of acting, and this one stays incapable of anything but vetted audits.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • SSH Read-Only MCP Server

    kunwarmahen
    F
    license
    A
    quality
    D
    maintenance
    Enables secure remote SSH command execution with strict read-only enforcement, allowing safe delegation of SSH access to Claude while preventing write operations. Supports connection pooling, command validation, and comprehensive logging for audit trails.
    5
    1
    -

  • firewalla-mcp-server

    productengineered
    A
    license
    A
    quality
    D
    maintenance
    A read-only MCP server that enables Claude to audit Firewalla network security configurations and monitor network activity. It provides tools to inspect devices, rules, alarms, and traffic flows without making any changes to the Firewalla system.
    8
    516 npm
    MIT

  • trmm-exec-mcp

    JohnGilligan2
    A
    license
    Not graded
    quality
    C
    maintenance
    Provides read-only access to Tactical RMM, enabling agent searches, detailed agent information, audit log queries, and execution of information-gathering PowerShell scripts on agents, with Entra ID authentication and a strict read-only guard.
    MIT

  • sec-ops-mcp

    JoaquinHernandez
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables LLMs and AI agents to perform defensive security posture assessments, privilege escalation surface audits, and post-quantum cryptography readiness checks through read-only diagnostic tools.
    MIT