Proofpoint Essentials MCP server

Proofpoint Essentials MCP Server

A Model Context Protocol (MCP) server for the Proofpoint Essentials API. Enables AI assistants to manage MSP-multi-tenant email security: organizations, domains, users, licensing, features, subscription packages, and email flow reporting.

This is a distinct product/API from Proofpoint TAP (see proofpoint-mcp for TAP threat intelligence, quarantine, and URL defense) — Essentials is Proofpoint's SMB/MSP email-security product, with its own base URL, auth model, and org-management surface.

Part of the WYRE AI MCP fleet — a growing suite of AI

integrations for the MSP stack.

Installation

npm install @wyre-ai/proofpoint-essentials-mcp

Configuration

Set the following environment variables:

Only organization-administrator accounts can authenticate against this API; end-user accounts cannot.

Usage

Running with Claude Desktop

Add to your Claude Desktop claudedesktopconfig.json:

{
  "mcpServers": {
    "proofpoint-essentials-mcp": {
      "command": "npx",
      "args": ["@wyre-ai/proofpoint-essentials-mcp"],
      "env": {
        "PROOFPOINT_ESSENTIALS_USERNAME": "your-username",
        "PROOFPOINT_ESSENTIALS_PASSWORD": "your-password"
      }
    }
  }
}

Running with Claude Code (CLI)

claude mcp add proofpoint-essentials-mcp \
  -e PROOFPOINT_ESSENTIALS_USERNAME=your-value \
  -e PROOFPOINT_ESSENTIALS_PASSWORD=your-value \
  -- npx -y @wyre-ai/proofpoint-essentials-mcp

Docker

docker build --platform linux/amd64 --build-arg GITHUB_TOKEN=$(gh auth token) -t proofpoint-essentials-mcp .
docker run \
  -e PROOFPOINT_ESSENTIALS_USERNAME=your-value \
  -e PROOFPOINT_ESSENTIALS_PASSWORD=your-value \
  -e MCP_TRANSPORT=http \
  -p 8080:8080 proofpoint-essentials-mcp

Available Tools

Proofpoint Essentials is an MSP multi-tenant API — every org/domain/user-scoped tool takes the target customer organization's domain as a per-call argument (credentials are not scoped to a single org).

Organizations

• proofpointessentialsorg_get — get org data and its domains
• proofpointessentialsorgsetactive — activate/deactivate an org ⚠ high-impact
• proofpointessentialsorg_delete — delete an org ⚠ destructive, irreversible

Domains

• proofpointessentialsdomains_list
• proofpointessentialsdomains_create — batch add
• proofpointessentialsdomains_update ⚠ high-impact
• proofpointessentialsdomains_delete ⚠ destructive, irreversible

Users

• proofpointessentialsusers_list
• proofpointessentialsusers_get
• proofpointessentialsusers_create — batch add
• proofpointessentialsusers_update ⚠ high-impact
• proofpointessentialsusers_delete ⚠ destructive, irreversible

Endpoint discovery

• proofpointessentialsendpoint_discover — resolve which region hosts a customer domain

Shortened. The full README is on GitHub.