Avanan MSP (Legacy SmartAPI) MCP server

by WYRE-AI·io.github.WYRE-AI/avanan-legacy-mcp·v2.3.2

No reviews yet

MCP server for the legacy Avanan SmartAPI: MSP tenant management plus per-tenant security tools.

B70/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B70/100

not scanned yet

Adoption

New

0 stars

Reviews

Write one

Nobody has reviewed Avanan MSP (Legacy SmartAPI) yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Avanan MSP (Legacy SmartAPI) tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How Avanan MSP (Legacy SmartAPI) compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 70/100; higher than 33% of 915 Security servers

Release history: 3 versions in the registry since 2026-09-09, latest 2026-10-14, typically one every 26 days.

Install Avanan MSP (Legacy SmartAPI) in Claude Code, Cursor or VS Code

claude mcp add avanan-legacy-mcp -- docker run -i --rm ghcr.io/wyre-ai/avanan-legacy-mcp:v2.3.2

Add to Cursor

What the publisher says

From the Avanan MSP (Legacy SmartAPI) repository's README, as published. We do not edit it. Read it on GitHub

avanan-legacy-mcp

MCP server for the legacy Avanan SmartAPI on smart-api-production-*.avanan.net: MSP tenant management plus per-tenant security (events, entities, exceptions, remediation). Distinct from avanan-mcp, which targets the Check Point Infinity Portal HEC API.

Implements the Avanan MSP SmartAPI Reference Guide (22 July 2026) and the Avanan SmartAPI Reference Guide (Feb 2024):

Features

interactive card in MCP Apps hosts (Claude Desktop/web) showing domain, status, deployment mode, license package, protected users, PoC dates, and add-ons. The card is read-only, neutral by default, and brandable via window.BRAND injection or MCPBRAND env vars (MCPBRANDNAME, MCPBRANDLOGOURL, MCPBRANDPRIMARYCOLOR, MCPBRANDACCENTCOLOR, MCPBRANDBG, MCPBRAND_TEXT). Plain-JSON behavior is unchanged in other hosts. Rebuild the embedded card HTML after editing ui/ with npm run build:ui.

Interactive tenant card (MCP Apps, SEP-1865): avanangettenant renders as an

Configuration

In gateway mode, credentials are taken per-request from headers: X-Avanan-Client-Id, X-Avanan-Client-Secret, optionally X-Avanan-Region.

The server performs the token handshake itself: it calls GET /v1.0/auth, caches the one-hour JWT per client ID, and refreshes it a minute before expiry.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Avanan MSP (Legacy SmartAPI): common questions

Is Avanan MSP (Legacy SmartAPI) MCP server safe?: Mostly: it is graded B (70/100). Read the Avanan MSP (Legacy SmartAPI) safety report
How do I install Avanan MSP (Legacy SmartAPI)?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Avanan MSP (Legacy SmartAPI) need an API key?: Yes. The registry entry asks for AVANAN_CLIENT_SECRET, CONDUIT_S2S_SECRET.
Is Avanan MSP (Legacy SmartAPI) maintained?: The last commit was 38 days ago (2026-09-28). The latest release is v2.3.2.
What can I use instead of Avanan MSP (Legacy SmartAPI)?: Servers from other publishers that do the same job: Skylos MCP server, Snyk MCP server and CrowdStrike Falcon MCP Server.

Alternatives to Avanan MSP (Legacy SmartAPI)

Same job from other publishers: the closest match first, then the best rated.

Skylos
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
not reviewed
Established
C
Snyk
Easily find and fix security issues in your applications leveraging Snyk platform capabilities.
not reviewed
Established
B
CrowdStrike Falcon MCP Server
Connects AI agents with CrowdStrike Falcon for security analysis and automation.
not reviewed
Established
A
Wireshark
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
not reviewed
Established
A
Virustotal
MCP server for querying VirusTotal API with comprehensive security analysis tools.
not reviewed
Established
B

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 70/100
Stars: 0
Downloads/wk: –
Price: Free
Licence: Apache-2.0
Transport: Local · oci
Version: 2.3.2
Category: Security
Last release: 2026-09-28

Credentials it needs

AVANAN_CLIENT_IDMSP API Client ID issued by Avanan Support (sent as x-av-app-id)
AVANAN_CLIENT_SECRETsecretMSP API Client Secret used to sign every request (x-av-sig); never sent on the wire
AVANAN_REGIONAPI region: us (default), eu, ca, ap, euw2 (UK), or aps1 (India). Avanan issues one key per region.
MCP_TRANSPORTTransport mode: 'stdio' for local CLI use, 'http' for gateway hosting
MCP_HTTP_PORTHTTP transport listen port
LOG_LEVELLog verbosity: debug, info, warn, error
MCP_HTTP_HOSTHTTP bind address. Defaults to 127.0.0.1. Honored when CONDUIT_S2S_SECRET is set. The container image sets 0.0.0.0.
AUTH_MODEHTTP credential source: env (AVANAN_* variables) or gateway (required X-Avanan-Client-Id and X-Avanan-Client-Secret headers, no env fallback).
CONDUIT_S2S_SECRETsecretGateway S2S secret. HTTP refuses to start when this is empty or a known placeholder. /mcp then requires a valid X-Gateway-S2S header.
MCP_ALLOW_INSECURE_DEVSet to exactly 1 to start HTTP without CONDUIT_S2S_SECRET. Local development only; the listener is forced to 127.0.0.1.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/wyre-ai-avanan-legacy-mcp.svg)](https://mcp.market/server/wyre-ai-avanan-legacy-mcp)

How the badge works