Query Proofpoint threats, clickers, and IOCs from the terminal with local storage.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "Proofpoint MCP" yet — see the docs or source repo.
Use the Proofpoint MCP to fetch TAP threats from the last 24 hours, sort them by severity, and summarize the key details.
A severity-sorted threat list with timestamps, types, severity levels, and brief descriptions.
Use the Proofpoint MCP to find clicker records related to a phishing email and summarize the users, click times, source IPs, and risk indicators.
A detailed list of related clickers and a risk summary for follow-up response and escalation.
Use the Proofpoint MCP to check whether this domain and hash match any IOCs, then combine the results with the local threat store to provide risk context and remediation advice.
IOC match results, related threat context, and recommended blocking, isolation, or monitoring actions.
Run ConnectWise PSA workflows offline from the terminal with typed queries.
Manage Kaseya BMS tickets, CRM, contracts, finance, and offline analytics.
Track usage, billing drift, and alert traces in Gradient MSP Synthesize.
Script Salesbuildr resources and analyze margins and pipeline data offline.
Inspect SkyKick backup posture, stale snapshots, and coverage gaps across environments.
Query runZero and diff a local attack surface snapshot over time.
Investigate email threats, run forensics, and quarantine messages with Proofpoint TAP.
Query threat intelligence and trace incidents for faster security triage automation.
Investigate threat indicators via urlscan and VirusTotal with compact structured results.
Enrich threat intelligence IOCs like domains, IPs, and URLs for security analysis.
Analyze PCAPs offline to extract streams, detect threats, and find leaked credentials.
Capture and analyze network packets to detect threats and vulnerability signals.