avanan-mcp
This server connects AI assistants to Check Point Avanan (Harmony Email & Collaboration) to manage email security events, investigate threats, and handle exceptions.
Security Event Management
Query security events filtered by type (phishing, malware, DLP, anomaly, etc.), severity, state, date range, and SaaS platform
Retrieve full details for a specific security event by ID
Email Search & Investigation
Search email and SaaS entities by sender, recipient, subject, platform, date range, and extended attribute filters
Retrieve full details for a specific email entity by ID
Threat Remediation
Quarantine or restore security events and email entities (reversible, high-impact actions)
Monitor the progress of quarantine/restore actions via task status tracking
Exception & Policy Management
List, add, update, or permanently delete whitelist/blacklist entries by sender, domain, subject, recipient, or attachment hash
Avanan (Check Point) MCP Server
A Model Context Protocol (MCP) server for Check Point Avanan (Harmony Email & Collaboration). Enables AI assistants to manage security events, investigate threats, and handle multi-tenant MSP operations across your email security environment.
This is a Model Context Protocol (MCP) server that connects Claude (or any MCP-compatible AI) to your Check Point Avanan environment.
Part of the MSP Claude Plugins ecosystem — a growing suite of AI integrations for the MSP stack. Built by MSPs, for MSPs.
Features
Interactive Security Event Card (MCP Apps):
hec_get_eventrenders as a read-only interactive card in MCP Apps hosts (Claude Desktop/web) showing severity, state, platform, and remediation status; neutral by default, brandable viawindow.__BRAND__injection orMCP_BRAND_*env vars; plain-JSON behavior is unchanged in other hosts
Related MCP server: mimecast-mcp
Installation
npm install @wyre-technology/avanan-mcpConfiguration
Set the following environment variables:
Variable | Required | Description |
| Yes | Your Checkpoint/Avanan OAuth2 client ID |
| Yes | Your Checkpoint/Avanan OAuth2 client secret |
| No | API region (default: us) |
| No | Transport mode: stdio (default) or http |
Usage
Running with Claude Desktop
Add to your Claude Desktop claude_desktop_config.json:
{
"mcpServers": {
"avanan-mcp": {
"command": "npx",
"args": ["@wyre-technology/avanan-mcp"],
"env": {
"CHECKPOINT_CLIENT_ID": "your-checkpoint-client-id"
"CHECKPOINT_CLIENT_SECRET": "your-checkpoint-client-secret"
}
}
}
}Running with Claude Code (CLI)
claude mcp add avanan-mcp \
-e CHECKPOINT_CLIENT_ID=your-value \
-e CHECKPOINT_CLIENT_SECRET=your-value \
-- npx -y @wyre-technology/avanan-mcpDocker
docker build -t avanan-mcp .
docker run \
-e CHECKPOINT_CLIENT_ID=your-value \
-e CHECKPOINT_CLIENT_SECRET=your-value \
-p 8080:8080 avanan-mcpAvailable Domains
Events
Security event retrieval and investigation
Actions
Take action on threats (quarantine, release, etc.)
Exceptions
Manage email exceptions and allowlists
Search
Search across email security data
Development
# Clone the repository
git clone https://github.com/wyre-technology/avanan-mcp.git
cd avanan-mcp
# Install dependencies
npm install
# Build
npm run build
# Run tests
npm testContributing
Contributions are welcome! Please see CONTRIBUTING.md if present, or open an issue to discuss changes.
License
Licensed under the Apache License, Version 2.0. See LICENSE for details.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseAqualityAmaintenanceMCP server for Proofpoint Email Protection - email security, threat intelligence, TAP (Targeted Attack Protection), and email filtering API integrationLast updated401Apache 2.0
- Alicense-qualityCmaintenanceMCP server for Mimecast Email Security — message tracking, threat intelligence, and email queue management. Enables AI assistants to investigate and manage email security events.Last updated1Apache 2.0
- Alicense-qualityBmaintenanceMCP server for Spanning Cloud Backup — M365/GWS/Salesforce SaaS backup, restore, and audit. Enables AI assistants to manage and monitor cloud backup protection via the Spanning API.Last updatedApache 2.0
- Alicense-qualityAmaintenanceMCP server for interacting with the ThreatLocker Portal API, enabling querying of computers, applications, policies, audit logs, and more through AI assistants.Last updated1GPL 3.0
Related MCP Connectors
MCP Server for agents to onboard, pay, and provision services autonomously with InFlow
Hosted Amazon Seller and Vendor MCP server for Claude, ChatGPT, Cursor, Codex, Gemini, Copilot.
Official Microsoft MCP Server to query Microsoft Entra data using natural language
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/wyre-technology/avanan-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server