Skip to main content
Glama
iffystrayer

Maester MCP Server

by iffystrayer

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
MAESTER_PWSHNoPowerShell executable (default pwsh)pwsh
AZURE_CLIENT_IDNoApp registration client ID
AZURE_TENANT_IDNoEntra tenant ID
MAESTER_DRIFT_ROOTNoBaseline folder for -DriftRoot drift detection
MAESTER_TESTS_PATHNoTests folder (default ~/maester-tests)~/maester-tests
AZURE_CLIENT_SECRETNoApp registration client secret
MAESTER_RESULTS_PATHNoWhere result JSON/MD/HTML files are written
AZURE_USE_MANAGED_IDENTITYNoSet to 'true' for Azure-hosted (no secret)false

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
run_maester_testsA

Run Maester 2.2 security tests against your Microsoft 365 / Entra tenant. Returns a pass/fail summary and results file paths. Scope with tags and services. Takes 2–10 min depending on breadth.

audit_ai_agentsA

Audit the organisation's AI attack surface using Maester's AIAgent checks (MT.1113–MT.1122): risky Copilot Studio agent sharing, missing agent authentication, risky HTTP config, AI-driven email exfiltration, MCP server tools that need review, hard-coded credentials in topics, dormant/orphaned agents, plus high agent-risk sign-ins. Requires the Dataverse service. Use this to let an AI agent police the org's other agents and MCP servers.

get_security_posture_summaryA

Parse a results file into a structured summary: overall pass rate, per-category breakdown, critical/high failures sorted first, and top failures. Good first call after run_maester_tests.

get_failed_testsA

List all failed tests from a results file with descriptions and remediation, optionally filtered by category tag.

get_test_detailA

Get full details — description, result, remediation, help URL, severity — for one test by ID.

run_ca_whatifA

Simulate a user sign-in against all Conditional Access policies via the Graph evaluate API. Returns which policies apply, block, or grant.

merge_tenant_resultsA

Merge multiple per-tenant Maester result files into a single multi-tenant HTML report (for MSPs / multi-tenant orgs). Wraps Merge-MtMaesterResult + Get-MtHtmlReport.

list_available_tagsA

List every test tag available in the installed test suite via Get-MtTestInventory. Use these to scope run_maester_tests.

update_maester_testsA

Update the Maester module and test files to the latest versions, and report the resulting module version.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/iffystrayer/maester-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server