CIPP MCP — Claude Code MCP server: what it does, how to install
Links AI agents to the CIPP API to inspect Microsoft 365 and Intune tenants. Useful for MSP engineers running fleet-wide posture audits.
Open on GitHubWhat CIPP MCP - Microsoft 365, Entra ID, Intune, Exchange, Defender, GDAP does
The server bridges your AI agent to the CIPP API across managed customer environments. It surfaces Microsoft 365 and Exchange Online settings inside a single prompt workspace. Under the hood, the installer drops two binaries: cipp-cli for terminal tasks and cipp-mcp for agent communication. The package also maintains an offline cache for fleet posture lookups.
Take precautions with API permissions. The built-in cipp_execute tool exposes 299 write actions without interactive confirmation prompts. Grant the connector an API token with read-only roles so the model cannot make unprompted changes to client settings.
Never launch the connector using --transport http. That mode listens on all network interfaces without authentication or browser rebinding protection. Stick strictly to the standard stdio transport to keep your environment secure.
What it helps with
- audit Entra ID and Intune configurations across multiple tenants
- inspect Microsoft 365 security posture without opening admin portals
- query Defender alerts and Exchange settings across GDAP accounts
- scan client tenants for non-compliant policies from the CLI
Example prompts for the agent
- List active Defender alerts across all client tenants managed through CIPP
- Find devices failing Intune compliance rules in our tenant fleet
- Compare conditional access policies across connected Microsoft 365 accounts
How to install CIPP MCP - Microsoft 365, Entra ID, Intune, Exchange, Defender, GDAP
Install
The MCP registry has no launch command for it: see the repository README
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about CIPP MCP - Microsoft 365, Entra ID, Intune, Exchange, Defender, GDAP
How to install CIPP MCP in Claude Code?
Add the repository by running /plugin marketplace add Servosity/msp-skills. Next, install the package with /plugin install cipp@msp-skills.
What does CIPP MCP do?
It gives your AI agent access to the CIPP API to query Microsoft 365 and Intune environments. You can run cross-tenant checks without logging into each portal individually.
Why should you avoid HTTP transport mode?
Running --transport http opens a port on all interfaces without authentication or rebinding safeguards. You must use the default stdio transport to prevent unauthorized access.
