OctoWatch DLP
Read-only OctoWatch DLP Cloud MCP: risks, idle time, productivity, monitoring.
Connector by extralabs · GitHub account verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/extralabs-octowatch-mcp
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 22 read · 0 write · 0 deleteRead-only
- Secrets
- 1 (API keys, tokens or passwords)
- Install scripts
- Not scanned yet
- Runs as
- Python package
Tools by what they do 22
Read from the source code; the running server may list different tools.
Read 22 · Look things up without changing anything.
get_account_readonlyget_activity_detailget_activity_summaryget_analyticsget_chronoget_dashboardget_day_structureget_idle_summaryget_productivity_summaryget_timesheetget_user_infolist_anomalies
Show 10 more tools
list_api_coveragelist_directorylist_monitoringlist_onlinelist_reportslist_riskslist_stream_metalist_users_groupsoctowatch_whoamisearch_monitoring
Secrets and settings it asks for
Secrets: values you paste in that let it act as you.
OCTOWATCH_PASSWORD
Other settings (environment variables or headers).
OCTOWATCH_API_BASEOCTOWATCH_EMAILOCTOWATCH_TOOLSETS
Files it touches
- Any path the agent passes to its tools
Tools (22)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
get_account_readonlyAccount read-onlyRead-only account/profile/license Gets (SPA header contracts). profiles: GetProfiles2 — ProfilesType 0|1|2; optional user_id + alias_type (1=user, 14=group); defaults AliasID/AliasType=-1. timetable/rules/profile_settings/computer_settings: require profile_id. computer_profiles: optional computer_guid (Guid header).
get_activity_detailActivity detailActivity drill-down: ActivityWindow (needs activity_name) or CategoryWindow (needs category_guid).
get_activity_summaryActivity summaryTop apps and sites by ActiveTime (POST /api/Activity/Overall2).
get_analyticsGet analyticsAnalytics rollups: view=overall|disciplina|activity|productivity.
get_chronoChronometryChronometry timeline (POST /api/Chrono/Overall2).
get_dashboardGet dashboard widgetDashboard widgets (metadata only; screenshot blobs stripped when compact).
get_day_structureDay structureDay structure: mode=list (DayStructureList) or detail (GetDayStructure). detail requires user_id. Filters match console: ProductivityFilter 0–4, ActivityTypeFilter 0–2 (defaults 0).
get_idle_summaryIdle time summaryRank users by inactive (idle) time from Productivity/Overall3. Use for: 'who was idle longest?', 'idle > N hours', InactiveTime totals. Do NOT use list_anomalies for idle — Alerts are formal deviations only.
get_productivity_summaryProductivity summaryPer-user productivity rollup (Overall3 + stats + Analytics metrics).
get_timesheetTimesheetTimesheet / attendance summary (POST /api/TimeSheet/Overall2).
get_user_infoGet user infoUser/computer detail reads (SPA GET headers). user_data / tooltip / group: need user_id (AliasID). group = group *path* for that user (not load-by-GroupID). computer / users_from_computer: need computer_guid (ComputerGuid).
list_anomaliesList formal alertsList formal Alerts / deviations (POST /api/Alerts/Overall2). Use for: lateness, overtime, unusual app-share, timetable-fired alerts. Do NOT use for idle/inactive duration — that is get_idle_summary (InactiveTime). Do NOT use for DLP keyword/USB policy hits — that is list_risks.
list_api_coverageAPI coverage matrixStatic gap matrix: which console APIs are covered vs intentional out-of-scope.
list_directoryList directoryDirectory reads: users/groups tree, users, groups, computers, additional operators. users_groups is session-cached (~5 min); pass refresh=true to force reload.
list_monitoringList monitoringSingle Monitoring list (Sites, Apps, Screens, Keystrokes, Mail, …). For keyword search across many Monitoring kinds (console Tools → Search), use search_monitoring(filter_key=…) instead of calling this 13–19 times. Sensitive kinds return text truncated when compact=true. No binary media.
Show 7 more tools
list_onlineList online presenceOnline presence (POST /api/Live/Overall2). No webcam or live stream frames.
list_reportsList reportsList scheduled report mailing settings and background processing tasks.
list_risksList DLP risksList or summarize DLP/rule Risks for a period. Use for: policy/keyword/USB/AI rule hits. Default mode=summary (by_user from Analytics/Overall; by_rule/by_day/sample from Risks/Overall2). Not for idle time (get_idle_summary) or timetable deviations (list_anomalies).
list_stream_metaStream metadataDesktop video metadata (SPA GET contracts; no DownloadVideo). which_content: needs user_id; uses DateTo (or period end) as DateTime. videos: needs user_id + DateFrom/DateTo (UserID header). downloads: Bearer only (exported file list).
list_users_groupsList users and groupsList users and groups tree (GetUsersGroups2). Type 0=root, 1=group, 2=user. These Type values are for the UI tree only. For report POST filters use NodeType 14=group and NodeType 1=user (AliasID). Cached ~5 min per MCP session; pass refresh=true to force reload.
octowatch_whoamiWho am IShow which OctoWatch API host and account the MCP server is using (password never returned).
search_monitoringSearch monitoringConsole Tools → Search: parallel Monitoring fan-out with FilterKey. Use for: 'find keyword X across activity' (sites/apps/keys/mail/files/…). Prefer this over calling list_monitoring many times. Not for Risks (list_risks), idle (get_idle_summary), or formal Alerts (list_anomalies). Does not search SearchQueries. kinds: optional comma-separated subset (e.g. "Sites,Apps,Mail" or "sites,mail"). Default = all Tools Search sources.
Signals
- Stars
- 2
- Forks
- 0
- Open issues
- 0
- Weekly downloads
- 25
- Last commit
- Aug 27, 2026 (2 months ago)
- Last release
- Aug 27, 2026 (2 months ago)
- Last package publish
- Aug 27, 2026 (2 months ago)
From GitHub (fetched Oct 24, 2026) and the package registry.
Details
- Registry name
io.github.extralabs/octowatch-mcp- Version
- 0.5.1
- Auth
- API key
- Packages
- pypi octowatch-mcp
- License
- MIT
- Website
- octowatchdlp.com/
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Cite this page
OctoWatch DLP MCP server. Agent Mart. https://agentmart.dev/connectors/extralabs-octowatch-mcp (last updated 2026-10-24)