KnowBe4 MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| KNOWBE4_REGION | No | Your server region - us, eu, ca, uk, or de | us |
| KNOWBE4_API_KEY | Yes | Your KnowBe4 API key |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| get_accountA | Get account and subscription data including subscription level, number of seats, risk score, and more |
| get_account_risk_score_historyA | Get account risk score history. Optionally include full history or default to 6 months |
| get_usersA | Get a list of all users in your KnowBe4 account. Can filter by status, group, or expand group details |
| get_userB | Get a specific user by their user ID |
| get_group_membersB | Get a list of all users in a specific group |
| get_user_risk_score_historyB | Get risk score history for a specific user |
| get_groupsC | Get a list of all groups in your KnowBe4 account |
| get_groupB | Get a specific group by group ID |
| get_group_risk_score_historyB | Get risk score history for a specific group |
| get_phishing_campaignsB | Get all phishing campaigns in your account |
| get_phishing_campaignC | Get data from a specific phishing campaign |
| get_phishing_security_testsB | Get all phishing security tests (PSTs) in your account |
| get_campaign_security_testsC | Get all PSTs from a specific phishing campaign |
| get_phishing_security_testB | Get a specific phishing security test by PST ID |
| get_pst_recipientsA | Get all recipient results from a specific phishing security test |
| get_pst_recipientA | Get a specific recipient's results from a phishing security test |
| get_store_purchasesC | Get all store purchases in your KnowBe4 account |
| get_store_purchaseB | Get a specific store purchase by ID |
| get_policiesC | Get all uploaded policies in your KnowBe4 account |
| get_policyA | Get a specific policy by policy ID |
| get_training_campaignsA | Get all training campaigns in your account |
| get_training_campaignB | Get a specific training campaign by campaign ID |
| get_training_enrollmentsC | Get all training enrollments in your account |
| get_training_enrollmentA | Get a specific training enrollment by enrollment ID |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 24 tools
Each tool targets a distinct entity or specific query (e.g., get_group vs get_group_members, get_phishing_campaign vs get_phishing_campaigns). No two tools have overlapping purposes; plural/singular pairs are standard and clear.
All tools follow a consistent 'get_' + snake_case noun pattern (e.g., get_account, get_group_members, get_phishing_security_tests). No mixed conventions or verb variations.
With 24 tools, the set is on the high side of acceptable for a read-only API. It covers many entities, but the count feels slightly heavy compared to typical scopes (3-15). However, each tool serves a clear purpose.
The tools are entirely read-only; there are no create, update, or delete operations. For a server likely intended to manage KnowBe4 accounts, this is a significant gap. Agents cannot trigger actions like creating campaigns or users.