{"name":"io.github.Servosity/cisco-duo-mcp","slug":"servosity-cisco-duo-mcp","title":"Cisco Duo MCP","description":"Fix Duo MFA lockouts and see every MSP subaccount at once, from your AI agent.","url":"https://mcp.market/server/servosity-cisco-duo-mcp","rating":null,"grade":"B","score":75,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":32,"stars":59,"forks":13,"downloads_week":null,"last_push_at":"2026-10-15T18:35:59.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"mcpb","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/servosity/msp-skills","website":null,"version":"0.1.4","remotes":[],"packages":[{"registryType":"mcpb","identifier":"https://github.com/Servosity/msp-skills/releases/download/cisco-duo-v0.1.4/cisco-duo-mcp.mcpb","version":"0.1.4","fileSha256":"953b58b62943fac4d6d088bcedbb2ad5672eb97ba521f4210b5acc10516cfae4","transport":{"type":"stdio"},"environmentVariables":[{"description":"Your Duo API hostname, e.g. api-XXXXXXXX.duosecurity.com (Duo Admin Panel > Applications > your Admin API application). For an MSP, use the parent account's hostname.","isRequired":true,"name":"CISCO_DUO_API_HOST"},{"description":"Admin API integration key (ikey) from the same Admin API application.","isRequired":true,"isSecret":true,"name":"CISCO_DUO_IKEY"},{"description":"Admin API secret key (skey). Used only to sign each request; it is never sent to Duo.","isRequired":true,"isSecret":true,"name":"CISCO_DUO_SKEY"},{"description":"Default customer subaccount for every call (account ID, or exact name from accounts list); a tool call that names its own account-id overrides it. Leave blank to act on the account the keys belong to; the fleet tools always cover every subaccount.","name":"CISCO_DUO_ACCOUNT_ID"},{"description":"Set to 1 for a read-only server: lockout fix, phone-swap, enrollment chase, sync, import and export are hidden, and the API execute tool refuses every non-GET call. Leave blank for the full tool set.","default":"1","name":"CISCO_DUO_MCP_READ_ONLY"},{"description":"Overrides the full API root (for a test server). Leave blank; CISCO_DUO_API_HOST is the normal setting.","name":"CISCO_DUO_BASE_URL"},{"description":"Bearer token that cisco-duo-mcp --transport http requires from every HTTP client (Authorization: Bearer). Leave blank for the default stdio transport, which Claude Desktop uses and which never reads it.","isSecret":true,"name":"CISCO_DUO_MCP_HTTP_TOKEN"},{"description":"Overrides the User-Agent the CLI sends on Duo requests. Leave blank to use the CLI's own built-in User-Agent.","name":"CISCO_DUO_USER_AGENT"},{"description":"Binds this MCP server to one tenant-gated client profile. Leave blank unless you configured client profiles.","name":"PRINTING_PRESS_CLIENT_PROFILE"}]}],"tools":[],"scan":null,"grade_history":[],"reviews":[]}