SaaS Alerts
MCP server for Kaseya SaaS Alerts — SaaS security monitoring for M365 & Google Workspace.
Connector by wyre-technology · GitHub account verified by the MCP Registry
Chalk Labs
Need help deploying SaaS Alerts?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/wyre-technology-saas-alerts-mcp
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 22 read · 3 write · 5 delete
- Secrets
- 1 (API keys, tokens or passwords)
- Install scripts
- Not scanned yet
- Runs as
- Docker image
Tools by what they do 30
Read from the source code; the running server may list different tools.
Read 22 · Look things up without changing anything.
saas_alerts_billing_get_detailssaas_alerts_billing_list_datessaas_alerts_customers_getsaas_alerts_customers_listsaas_alerts_devices_list_ignoredsaas_alerts_devices_list_mappedsaas_alerts_devices_list_orgssaas_alerts_devices_list_unmappedsaas_alerts_events_countsaas_alerts_events_count_advancedsaas_alerts_events_querysaas_alerts_events_query_advanced
Show 10 more tools
saas_alerts_events_scrollsaas_alerts_navigatesaas_alerts_partner_get_profilesaas_alerts_recommended_actionssaas_alerts_reports_get_scheduledsaas_alerts_reports_list_scheduledsaas_alerts_statussaas_alerts_users_get_mspsaas_alerts_users_list_by_customersaas_alerts_users_list_partner
Write 3 · Create, change, send or run things.
saas_alerts_customers_createsaas_alerts_customers_updatesaas_alerts_reports_create_scheduled
Delete 5 · Delete, drop, revoke or wipe things.
saas_alerts_customers_deletesaas_alerts_customers_set_account_whitelistssaas_alerts_customers_set_whitelistssaas_alerts_partner_update_brandingsaas_alerts_reports_delete_scheduled
Secrets and settings it asks for
Secrets: values you paste in that let it act as you.
SAAS_ALERTS_API_KEY
Other settings (environment variables or headers).
AUTH_MODELOG_LEVELMCP_TRANSPORT
Tools (30)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
saas_alerts_billing_get_detailsGet billing detailsread-onlyRetrieve billing details for a specific billing date. Use saas_alerts_billing_list_dates first to discover available dates.
saas_alerts_billing_list_datesList billing datesread-onlyList all available billing dates for the authenticated partner. Use the returned dates as input to saas_alerts_billing_get_details.
saas_alerts_customers_createCreate customerCreate a new SaaS Alerts customer for the authenticated partner.
saas_alerts_customers_deleteDelete customer (irreversible)can change or delete data⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently deletes a SaaS Alerts customer and all associated data. This action cannot be undone. Confirm with the user before invoking.
saas_alerts_customers_getGet customerread-onlyGet a single SaaS Alerts customer by ID.
saas_alerts_customers_listList customersread-onlyList all SaaS Alerts customers for the authenticated partner.
saas_alerts_customers_set_account_whitelistsSet customer account whitelistcan change or delete data⚠ HIGH-IMPACT. Replace the account-level whitelist for a customer. This overwrites the existing account whitelist. Confirm with the user before invoking.
saas_alerts_customers_set_whitelistsSet customer whitelistcan change or delete data⚠ HIGH-IMPACT. Replace the IP/country whitelist for a customer. This overwrites the existing whitelist. Confirm with the user before invoking.
saas_alerts_customers_updateUpdate customerUpdate an existing SaaS Alerts customer by ID.
saas_alerts_devices_list_ignoredList ignored devicesread-onlyList devices that have been explicitly marked as ignored.
saas_alerts_devices_list_mappedList mapped devicesread-onlyList devices that have been mapped (unified) to SaaS Alerts customer organizations.
saas_alerts_devices_list_orgsList device organizationsread-onlyList all device organizations visible to the authenticated partner.
saas_alerts_devices_list_unmappedList unmapped devicesread-onlyList devices that have NOT yet been mapped to a SaaS Alerts organization. Optionally filter by confidence score or whether mapping suggestions are available.
saas_alerts_events_countCount security eventsread-onlyCount security events matching the given filters without fetching full records.
saas_alerts_events_count_advancedAdvanced event countread-onlyCount events using a raw Elasticsearch query body without fetching full records.
Show 15 more tools
saas_alerts_events_queryQuery security eventsread-onlyQuery security events from SaaS Alerts with optional filters. Returns a paginated list of events matching the specified criteria. Events are compacted to triage-relevant fields by default; pass verbose: true for full raw records. Compact responses are capped at ~40,000 characters — over-cap result sets are truncated to the first events that fit, so prefer a modest size with from/size pagination or a narrower date range.
saas_alerts_events_query_advancedAdvanced Elasticsearch event queryread-onlyExecute an advanced Elasticsearch query against the SaaS Alerts events index. Accepts a raw Elasticsearch query body for maximum flexibility. Event hits are compacted to triage-relevant fields by default; pass verbose: true for full raw records. Compact responses are capped at ~40,000 characters — over-cap hit lists are truncated to the first hits that fit (hits.total still reports the true match count), so prefer a modest size with from/size in the query body.
saas_alerts_events_scrollScroll through event resultsread-onlyContinue paginating through a previous event query result set using a scroll ID. Call after saas_alerts_events_query_advanced returns a scroll ID. Event hits are compacted to triage-relevant fields by default; pass verbose: true for full raw records. Compact responses are capped at ~40,000 characters — if a scroll page exceeds the cap it is truncated, and the trimmed events canNOT be recovered by continuing the scroll (the server cursor has already advanced past them); re-run the originating query with a smaller size instead.
saas_alerts_navigateBrowse SaaS Alerts domain toolsread-onlyBrowse a domain to see its available tools and descriptions. All tools are callable at any time — navigation is optional discovery, not a gate.
saas_alerts_partner_get_profileGet partner profileread-onlyGet the partner profile associated with the authenticated API key.
saas_alerts_partner_update_brandingUpdate partner brandingcan change or delete data⚠ HIGH-IMPACT. Update the partner branding settings (logo, colours, etc.). This overwrites existing branding. Confirm with the user before invoking.
saas_alerts_recommended_actionsGet recommended actionsread-onlyGet the list of recommended remediation actions for SaaS Alerts event types. Use this to map detected event types to actionable guidance.
saas_alerts_reports_create_scheduledCreate scheduled reportCreate a new scheduled report.
saas_alerts_reports_delete_scheduledDelete scheduled report (irreversible)can change or delete data⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently delete a scheduled report. This action cannot be undone. Confirm with the user before invoking.
saas_alerts_reports_get_scheduledGet scheduled reportread-onlyGet a specific scheduled report by its ID.
saas_alerts_reports_list_scheduledList scheduled reportsread-onlyList all scheduled reports configured for the authenticated partner.
saas_alerts_statusCheck SaaS Alerts connectivityread-onlyCheck connectivity to SaaS Alerts by fetching the authenticated MSP user. Returns the list of available domains and connection status.
saas_alerts_users_get_mspGet MSP userread-onlyGet the MSP user profile associated with the authenticated API key. Also used as a connectivity / credential check.
saas_alerts_users_list_by_customerList users by customerread-onlyList all users belonging to a specific SaaS Alerts customer.
saas_alerts_users_list_partnerList partner usersread-onlyList all users associated with the authenticated partner account.
Signals
- Stars
- 0
- Forks
- 1
- Open issues
- 0
- Last commit
- Oct 14, 2026 (17 days ago)
- Last release
- Oct 14, 2026 (17 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
io.github.wyre-technology/saas-alerts-mcp- Version
- 1.2.4
- Auth
- API key
- Packages
- oci
ghcr.io/wyre-technology/saas-alerts-mcp:v1.2.4 - License
- License unknown
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from wyre-technology
- 0.648score
Autotask
wyre-technology
MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.
ConnectorAFreshness: ALocal★ 58Claude Code +5 - 0.638score
ConnectWise Manage
wyre-technology
MCP server for ConnectWise Manage PSA — companies, tickets, projects, time entries, and more.
ConnectorAFreshness: ALocal★ 28Claude Code +5 - 0.637score
NinjaOne
wyre-technology
MCP server for NinjaOne RMM — devices, organizations, alerts, and tickets.
ConnectorAFreshness: ALocal★ 26Claude Code +5 - 0.631score
IT Glue
wyre-technology
MCP server for IT Glue — organizations, configurations, passwords, flexible assets, and documents.
ConnectorAFreshness: ALocal★ 17Claude Code +5 - 0.624score
CIPP
wyre-technology
MCP server for CIPP — M365 multi-tenant management for MSPs (users, tenants, policies).
ConnectorAFreshness: ALocal★ 11Claude Code +5 - 0.612score
Action1
wyre-technology
Action1 MCP server — endpoint inventory, patch visibility, and policy automation via REST API.
ConnectorAFreshness: ALocal★ 3Claude Code +5
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get SaaS Alerts running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
SaaS Alerts MCP server. Agent Mart. https://agentmart.dev/connectors/wyre-technology-saas-alerts-mcp (last updated 2026-10-24)