avanan-legacy-mcp
This MCP server provides tools to manage Avanan MSP (legacy SmartAPI) operations, including child MSP partners, users, customer tenants, licenses, and usage reporting.
Child MSP Management: List, create, or delete child MSP partners (including all associated tenants).
MSP User Management: List, get, create, update, or delete MSP users with role, login method, and notification preferences.
Customer Tenant Management: List, get (renders as an interactive card in MCP Apps hosts), create, or delete customer tenants.
License Management: List available license packages and add-ons, and assign licenses (with optional add-ons and user cap) to tenants.
Usage Reporting: Retrieve monthly or daily usage details across all customer tenants.
Regional Support: Connects to regional Avanan SmartAPI endpoints (US, EU, CA, AP).
Authentication: Requires
AVANAN_APP_ID,AVANAN_TOKEN, andAVANAN_SECRETenvironment variables; supports per-request headers in gateway mode.
avanan-legacy-mcp
MCP server for the Avanan MSP SmartAPI (the "legacy" Avanan MSP tenant management
API — distinct from avanan-mcp, which targets the Checkpoint Harmony Email & Collaboration
HEC API).
Implements the Jan 2024 Avanan MSP SmartAPI Reference Guide:
Group | Tools |
Child MSPs |
|
MSP users |
|
Customer tenants |
|
Licenses |
|
Usage |
|
Features
Interactive tenant card (MCP Apps, SEP-1865):
avanan_get_tenantrenders as an interactive card in MCP Apps hosts (Claude Desktop/web) showing domain, status, deployment mode, license package, protected users, PoC dates, and add-ons. The card is read-only, neutral by default, and brandable viawindow.__BRAND__injection orMCP_BRAND_*env vars (MCP_BRAND_NAME,MCP_BRAND_LOGO_URL,MCP_BRAND_PRIMARY_COLOR,MCP_BRAND_ACCENT_COLOR,MCP_BRAND_BG,MCP_BRAND_TEXT). Plain-JSON behavior is unchanged in other hosts. Rebuild the embedded card HTML after editingui/withnpm run build:ui.
Related MCP server: abnormal-mcp
Configuration
Env var | Required | Description |
| yes | Application ID provided by Avanan Support ( |
| yes | Token from the Avanan auth handshake ( |
| yes | Shared secret used to compute the |
| no |
|
| no |
|
| no | HTTP transport port (default 8080). |
| no |
|
In gateway mode, credentials are taken per-request from headers:
X-Avanan-App-Id, X-Avanan-Token, X-Avanan-Secret, optionally X-Avanan-Region.
Status
Thex-av-sig signing algorithm is implemented as a best-guess HMAC-SHA256
because the MSP SmartAPI guide defers signing details to the parent Avanan API
Reference Guide. Replace the body of signRequest() in
src/utils/client.ts with the exact algorithm before
production use. The function is isolated so no other code needs to change.
Build
npm install
npm run build
npm startRegional endpoints
Region | Base |
US |
|
EU |
|
CA |
|
AP |
|
All endpoints sit under /v1.0/msp/....
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Tools
Related MCP Servers
- Alicense-qualityDmaintenanceAn advanced email security analysis MCP server for real-time phishing detection, comprehensive header analysis, and threat intelligence integration. It enables users to extract indicators of compromise and validate email authentication protocols like DKIM, SPF, and DMARC.MIT
- AlicenseAqualityAmaintenanceAn MCP server for Abnormal Security, enabling management of threat detection, email security cases, and AI-powered attack protection through Abnormal's API.10Apache 2.0
- Alicense-qualityAmaintenanceAn MCP server for Datto SaaS Protection, providing tools to manage cloud backup and recovery for Microsoft 365 and Google Workspace data through Datto's API.1Apache 2.0
- AlicenseAqualityAmaintenanceMCP server for Checkpoint Harmony Email & Collaboration (Avanan). Enables AI assistants to manage email security, anti-phishing, anti-malware, and threat detection via the Avanan API.131Apache 2.0
Related MCP Connectors
MCP server for Appcircle mobile CI/CD platform.
MCP server for ScanMalware.com URL scanning, malware detection, and analysis.
A paid remote MCP for hosted MCP server, built to return verdicts, receipts, usage logs, and audit-r
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/wyre-technology/avanan-legacy-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server