$ loading_
Manage multi-tenant Sophos security operations and policies through natural language.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "Sophos Central MCP Server" yet — see the docs or source repo.
Summarize all high-severity endpoint alerts across Sophos tenants in the last 24 hours, grouped by tenant, device, and threat type, and flag devices that should be isolated immediately.
A tenant-by-tenant summary of critical alerts, affected devices, and recommended isolation targets for immediate action.
Query all email events classified as malicious by Sophos this week across tenants, listing sender, recipient, threat category, remediation status, and produce a prioritized investigation checklist.
A list of email threat incidents, current remediation status, and risk-prioritized investigation recommendations.
Review firewall policy changes for a specified tenant over the last 7 days, identify newly added high-risk allow rules, and explain potential impact and recommended rollback items.
An audit report highlighting risky rule changes, impact analysis, and recommended remediation or rollback actions.
Manage endpoints, alerts, policies, and tenants through Sophos Central APIs.
Manage OPNsense firewall, networking, and services through natural language commands.
Analyze security incidents, map ATT&CK techniques, score severity, and recommend remediation.
Automatically investigate and manage Sophos Channel Server incidents and alert tickets.
Query Sophos XGS firewall configs for fast audits of rules, VPN, and policies.
Manage OPNsense firewall, network, and system settings with natural language.