$ loading_
Access Level RMM data with local fleet storage and offline rollup analysis.
This MCP tool comes from an official registry and is open source, which materially improves trust. However, it requires a Level API token, executes code, and declares a local SQLite fleet store, so it warrants caution overall; the provided materials do not show concrete red flags sufficient for a high-risk rating.
The materials explicitly require LEVEL_API_TOKEN, a sensitive credential that can access Level RMM endpoints. If exposed via logs, config files, or child-process environments, it could enable misuse of the associated account/API privileges.
No remote host is listed in the system field, but the description says it can access 'Every Level RMM endpoint,' so it is reasonable to infer network communication with Level services for its stated purpose. The materials do not show evidence of exfiltration to unknown or unrelated third-party endpoints.
The system flags executes-code, indicating the tool can start local processes or execute code. This is a common MCP capability, and the materials do not show requests for additional system privileges clearly disproportionate to its stated function.
The description mentions a 'local SQLite fleet store and offline cross-entity rollups,' indicating local storage and aggregation of fleet/entity-level data. This implies local data read/write access, but the materials do not indicate access to a broader-than-necessary file scope or sensitive system resources.
It is distributed via an official registry and has an auditable open-source repository with updates within the last year. Although the repository does not declare a license and has limited stars, the official source and source-code visibility keep overall supply-chain risk relatively low, with no clear signs of abandonment or suspicious distribution.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "Level MCP" yet — see the docs or source repo.
Use Level MCP to fetch endpoint online status, last check-in time, and alert counts, then summarize by site and list abnormal devices.
A site-level fleet health summary plus a prioritized list of abnormal endpoints.
Using the local SQLite fleet store, calculate 30-day patch coverage by department, identify unpatched devices, and rank them by risk.
A patch coverage report, a list of unpatched endpoints, and risk-based prioritization recommendations.
Use Level MCP for offline cross-entity rollups to compare device counts, alert trends, and ticket linkage across clients or business units, then generate a monthly summary.
A cross-entity comparison report highlighting high-alert areas, growth trends, and key operational metrics.
Manage N-central assets with offline org trees, cross-tenant search, and JWT protection.
Manage Datto RMM operations and analyze fleet data with local SQLite.
Script Salesbuildr resources and analyze margins and pipeline data offline.
Query Proofpoint threats, clickers, and IOCs from the terminal with local storage.
Manage AppDirect marketplace operations with offline mirroring and cross-company billing reconciliation.
Manage CIPP data with offline storage and fleet posture analytics.
Use typed Tactical RMM commands for offline queries and bulk endpoint operations.
Query local fleet telemetry, trips, positions, and alerts in natural language.
Manage local-first agent memory with versioning, search, ACLs, and sync.
Access Atera ops and service data for fleet health, SLA, and ticket insights.
Query all Domotz endpoints with a local fleet mirror for cross-site ops insights.
Access SuperOps PSA+RMM data in terminal and query it via local SQLite.