Ironscales
MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.
Connector by wyre-technology · GitHub account verified by the MCP Registry
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/wyre-technology-ironscales-mcp
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 5 read · 2 write · 1 delete · 1 not yet classified
- Secrets
- 1 (API keys, tokens or passwords)
- Install scripts
- Not scanned yet
- Runs as
- Docker image
Tools by what they do 9
Read from the source code; the running server may list different tools.
Read 5 · Look things up without changing anything.
ironscales_backironscales_incidents_getironscales_incidents_listironscales_stats_companyironscales_status
Write 2 · Create, change, send or run things.
ironscales_email_classifyironscales_navigate
Delete 1 · Delete, drop, revoke or wipe things.
ironscales_allowlist_manage
Not yet classified 1 · We could not tell from the name and description.
ironscales_remediation_act
Secrets and settings it asks for
Secrets: values you paste in that let it act as you.
IRONSCALES_API_KEY
Other settings (environment variables or headers).
AUTH_MODEIRONSCALES_COMPANY_IDLOG_LEVELMCP_TRANSPORT
Tools (9)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
ironscales_allowlist_manageAdd or remove entries from the sender allowlist. Allowlisted senders are never flagged as phishing threats. Supports email addresses, domains, and IP addresses.
ironscales_backReturn to the domain navigation menu.
ironscales_email_classifyClassify an email as phishing, spam, or legitimate using Ironscales AI analysis. Provide raw email headers and/or body content for analysis.
ironscales_incidents_getGet detailed information about a specific phishing incident by its ID, including affected recipients, email headers, threat indicators, and timeline.
ironscales_incidents_listList phishing incidents. Returns a paginated list of incidents with their status, severity, and summary information.
ironscales_navigateNavigate to a domain to see its available tools. Domains: incidents (phishing incidents), email (email classification), remediation (incident remediation), stats (company statistics), allowlist (sender allowlist management).
ironscales_remediation_actTake a remediation action on a phishing incident. Actions include quarantining emails, blocking senders, deleting messages from all mailboxes, or marking as false positive.
ironscales_stats_companyGet dashboard statistics for the company, including incident counts, threat trends, top targeted users, most common attack types, and remediation summary over a time period.
ironscales_statusCheck Ironscales API connection status and available domains.
Signals
- Stars
- 0
- Forks
- 1
- Open issues
- 0
- Last commit
- Oct 13, 2026 (15 days ago)
- Last release
- Oct 13, 2026 (15 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
io.github.wyre-technology/ironscales-mcp- Version
- 1.2.1
- Auth
- API key
- Packages
- oci
ghcr.io/wyre-technology/ironscales-mcp:v1.2.1 - License
- Apache-2.0
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from wyre-technology
- 0.648score
Autotask
wyre-technology
MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.
ConnectorAFreshness: ALocal★ 58Claude Code +5 - 0.638score
ConnectWise Manage
wyre-technology
MCP server for ConnectWise Manage PSA — companies, tickets, projects, time entries, and more.
ConnectorAFreshness: ALocal★ 28Claude Code +5 - 0.637score
NinjaOne
wyre-technology
MCP server for NinjaOne RMM — devices, organizations, alerts, and tickets.
ConnectorAFreshness: ALocal★ 26Claude Code +5 - 0.631score
IT Glue
wyre-technology
MCP server for IT Glue — organizations, configurations, passwords, flexible assets, and documents.
ConnectorAFreshness: ALocal★ 17Claude Code +5 - 0.624score
CIPP
wyre-technology
MCP server for CIPP — M365 multi-tenant management for MSPs (users, tenants, policies).
ConnectorAFreshness: ALocal★ 11Claude Code +5 - 0.612score
Action1
wyre-technology
Action1 MCP server — endpoint inventory, patch visibility, and policy automation via REST API.
ConnectorAFreshness: ALocal★ 3Claude Code +5
Cite this page
Ironscales MCP server. Agent Mart. https://agentmart.dev/connectors/wyre-technology-ironscales-mcp (last updated 2026-10-24)