Help us improve
Share bugs, ideas, or general feedback.
From sentinelone
Connects to SentinelOne's Purple console via authenticated HTTP for cybersecurity and endpoint protection tools. Runs as stdio subprocess. Requires PURPLEMCP_CONSOLE_TOKEN and PURPLEMCP_CONSOLE_BASE_URL.
npx claudepluginhub wyre-technology/msp-claude-plugins --plugin sentineloneCopy this JSON into your .mcp.json to enable this server
Add to your .mcp.json:
{
"mcpServers": {
"sentinelone": {
"type": "http",
"command": "uvx",
"args": [
"--from",
"git+https://github.com/Sentinel-One/purple-mcp.git",
"purple-mcp",
"--mode",
"stdio"
],
"url": "https://github.com/Sentinel-One/purple-mcp.git",
"env": {
"PURPLEMCP_CONSOLE_TOKEN": "${SENTINELONE_TOKEN}",
"PURPLEMCP_CONSOLE_BASE_URL": "${SENTINELONE_BASE_URL}"
}
}
}
}Replace placeholder values for: PURPLEMCP_CONSOLE_TOKEN
Review these signals before enabling this server
This MCP server needs API keys or credentials. Configure them in your environment before use.
This server connects to external services. Review the URLs it accesses before enabling.
Server configuration and connection parameters
uvxhttps://github.com/Sentinel-One/purple-mcp.gitCommand-line arguments passed to the server process
Environment variables set when the server starts
PURPLEMCP_CONSOLE_TOKEN=${SENTINELONE_TOKEN}PURPLEMCP_CONSOLE_BASE_URL=${SENTINELONE_BASE_URL}Sensitive values you must provide — never committed to source control
Share bugs, ideas, or general feedback.