Model Context Protocol moderate risk

Netskope

An MCP server for Netskope NPA, enabling AI-driven automation of infrastructure management, application lifecycle, and security policy enforcement.

Connections & Capabilities

Connects To

GitHub

Capabilities

readwriteexecadmin

Quickstart

Install

npm install @johnneerdael/ns-private-access-mcp

Config

{
  "mcpServers": {
    "netskope-mcp": {
      "command": "wsl.exe",
      "args": [
        "bash",
        "-c",
        "source ~/.nvm/nvm.sh && NETSKOPE_BASE_URL=https://your-tenant.goskope.com NETSKOPE_API_KEY=your-token npx -y @johnneerdael/netskope-mcp"
      ]
    }
  }
}

Exposed MCP Tools (5)

moderate

createPrivateApp

Creates a new private application within the Netskope NPA environment.

Adds a new application, potentially impacting access and routing.

high

updatePublisherAssociation

Associates a private application with a specific publisher.

Modifies the routing and access paths of an application.

high

createPolicy

Creates a new access control policy.

Directly impacts access control and security posture.

critical

deletePrivateApp

Deletes a private application.

Removes an application and its associated configurations.

safe

searchPublishers

Searches for existing publishers based on specified criteria.

Read-only operation with no side effects.

Safety Assessment

This MCP server provides powerful automation capabilities for Netskope NPA, but its write access and reliance on API keys introduce moderate risk. It's safe when used with careful planning and adherence to security best practices, but risky if misconfigured or if the API key is compromised.

Comprehensive input validation using Zod schemas
Rate limiting and API quota management
Detailed logging and monitoring
SCIM integration for identity resolution
Validation tools for compliance checking

Write access to Netskope NPA configurations
Potential for misconfiguration leading to security vulnerabilities
Reliance on API key for authentication
No explicit sandboxing mentioned in the documentation
Access to sensitive resources like private apps and policies