Teramind MCP server

Teramind MCP Server

MCP server for Teramind's insider-threat/employee-monitoring API - computer inventory, agent (user) inventory, departments, alerts, anomaly-rule and behavior-policy configuration, and monitoring-profile metadata - for AI assistants and the WYRE Conduit gateway.

This connector is PII-dense by construction (insider-threat/employee-monitoring product) and requires security review before merge - see Scope and Credential scope below.

Authentication

Teramind authenticates with a JWT Access Token, self-generated per-account in the Teramind dashboard (User menu -> Access Tokens), sent as the x-access-token header. There is no OAuth flow.

Teramind's API is per-customer-instance (cloud or on-premise/private-cloud) - there is no shared multi-tenant base URL like most other connectors in this catalog. Every credential set also carries the customer's own instance URL (e.g. https://yourcompany.teramind.co). In gateway mode both arrive per-request via the X-Teramind-Access-Token / X-Teramind-Instance-Url headers; in local/stdio mode they're read once from TERAMINDACCESSTOKEN / TERAMINDINSTANCEURL.

Configuration

Tools

Computers

• teramindlistcomputers - list monitored computers (hostname, FQDN, MAC/IP, OS, monitoring status).
• teramindgetcomputer - get full detail for a single computer.

Agents (users)

• teramindlistagents - list monitored agents (Teramind's term for a monitored employee/user identity): id, name, email, avatar, online status.
• teramindgetagent - get full detail for a single agent.

Departments

• teramindlistdepartments - list departments (org-structure metadata).
• teramindgetdepartment - get full detail for a single department.

Alerts

• teramindlistalerts - list fired rule-violation events in a time window, optionally filtered by agent/computer/department.

Anomaly rules

• teramindlistanomaly_rules - list configured ML-based anomaly-detection rules (type, risk quotient, trigger conditions).
• teramindgetanomaly_rule - get full detail for a single anomaly rule.
• teramindlistanomalyruletags - list the tags available to categorize anomaly rules.

Behavior policies

• teramindlistbehavior_policies - list behavior policies (what activity type each policy watches and its match conditions).
• teramindgetbehavior_policy - get full detail for a single behavior policy.
• teramindlistbehaviorpolicygroups - list behavior policy groups (the containers that organize behavior policies).
• teramindgetbehaviorpolicygroup - get full detail for a single behavior policy group.

Monitoring

• teramindlistmonitoring_profiles - list monitoring profiles (which data types are configured to be captured, and for whom).

Account

• teramindgetaccount - get the authenticated account's own settings (credential sanity check).

Scope

Shortened. The full README is on GitHub.