Ironscales MCP server
MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.
0 stars
Reviews
Write oneNobody has reviewed Ironscales yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Ironscales tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 9 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
How Ironscales compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 45% of 48,255 servers
Install Ironscales in Claude Code, Cursor or VS Code
claude mcp add ironscales-mcp -- docker run -i --rm ghcr.io/wyre-technology/ironscales-mcp:v1.2.1
What the publisher says
From the Ironscales repository's README, as published. We do not edit it. Read it on GitHub
Ironscales MCP Server
A Model Context Protocol (MCP) server for Ironscales email security. Enables AI assistants to investigate phishing incidents, manage email classification, execute remediations, and view security statistics.
This is a Model Context Protocol (MCP) server that connects Claude (or any MCP-compatible AI) to your Ironscales environment.
Part of the MSP Claude Plugins ecosystem — a growing suite of AI integrations for the MSP stack. Built by MSPs, for MSPs.
Interactive Incident Card (MCP Apps)
ironscalesincidentsget renders as an interactive card in MCP Apps hosts (Claude Desktop/web) showing the phishing incident's subject, status, severity, sender, affected recipients, and threat indicators; plain-JSON behavior is unchanged in other hosts. The card is read-only — remediation stays with the model-driven remediation tools. It is neutral by default and brandable via window.BRAND injection or MCPBRAND env vars (MCPBRANDNAME, MCPBRANDLOGOURL, MCPBRANDPRIMARYCOLOR, MCPBRANDACCENTCOLOR, MCPBRANDBG, MCPBRAND_TEXT) — no rebuild needed.
Installation
npm install @wyre-ai/ironscales-mcpConfiguration
Set the following environment variables:
Usage
Running with Claude Desktop
Add to your Claude Desktop claudedesktopconfig.json:
{
"mcpServers": {
"ironscales-mcp": {
"command": "npx",
"args": ["@wyre-ai/ironscales-mcp"],
"env": {
"IRONSCALES_API_KEY": "your-ironscales-api-key"
"IRONSCALES_COMPANY_ID": "your-ironscales-company-id"
}
}
}
}Running with Claude Code (CLI)
claude mcp add ironscales-mcp \
-e IRONSCALES_API_KEY=your-value \
-e IRONSCALES_COMPANY_ID=your-value \
-- npx -y @wyre-ai/ironscales-mcpDocker
docker build -t ironscales-mcp .
docker run \
-e IRONSCALES_API_KEY=your-value \
-e IRONSCALES_COMPANY_ID=your-value \
-p 8080:8080 ironscales-mcpAvailable Domains
Allowlist
Manage email allowlists and blocklists
Email investigation and classification
Incidents
Phishing incident management and triage
Remediation
Execute email remediations and quarantine
Stats
Security statistics and reporting
Development
# Clone the repository
git clone https://github.com/WYRE-AI/ironscales-mcp.git
cd ironscales-mcp
# Install dependencies
npm install
# Build
npm run build
# Run tests
npm testContributing
Contributions are welcome! Please see CONTRIBUTING.md if present, or open an issue to discuss changes.
License
Licensed under the Apache License, Version 2.0. See LICENSE for details.
Nothing above is checked by us. What we check is on the safety report.
Ironscales: common questions
- Is Ironscales MCP server safe?
- Mostly: it is graded B (75/100). Read the Ironscales safety report
- How do I install Ironscales?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Ironscales need an API key?
- Yes. The registry entry asks for
IRONSCALES_API_KEY. - Is Ironscales maintained?
- The last commit was 51 days ago (2026-09-14). The latest release is v1.2.1.