{"id":"checkpointsw-mcp-servers","name":"mcp-servers","homepage":null,"repo_url":"https://github.com/CheckPointSW/mcp-servers","category":"security","subcategories":[],"tags":["mcp","check-point","security","policy-management","logs","threat-intelligence","diagnostics","typescript","monorepo"],"what_it_does":"Monorepo providing multiple TypeScript Model Context Protocol (MCP) server packages for Check Point security platforms (e.g., management, management logs, threat prevention, HTTPS inspection, Harmony SASE, reputation, gateway CLI diagnostics, threat emulation, GAIA, documentation assistant, CPInfo analysis, Argos ERM, and policy insights). Each MCP server is intended to expose a structured interface to query and analyze security-related data.","use_cases":["Ask an AI assistant questions over Check Point policy/configuration data via MCP tools","Audit and analyze security policies, objects, and topology (management MCPs)","Investigate security events and logs (management-logs MCPs)","Query threat prevention / IPS / IOC data and updates","Assist with diagnostics and troubleshooting from gateway/CPInfo outputs","Support MSP/distributed environments (Harmony SASE, Spark Management MCPs)","Provide a documentation assistant for Check Point product/config guidance"],"not_for":["Directly replacing Check Point administration UI/CLI for complex change workflows without appropriate safeguards","Use as a general-purpose data connector without validating data exposure to the model","Environments where you cannot control which clients/models can access sensitive security data"],"best_when":"You have a trusted MCP client and a need to operationalize Check Point security context for AI-driven querying, analysis, and reporting.","avoid_when":"You cannot enforce trust boundaries (untrusted client/model), or you cannot manage the risk that sensitive/query results are exposed to the model.","alternatives":["Use Check Point APIs directly from your own application (with your own auth, filtering, and redaction)","Build a custom ETL/export pipeline to a secure analytics system and query that system via an LLM-safe interface","Use vendor-provided admin reports/log exports and analyze them in a SIEM/SOAR workflow"],"af_score":42.2,"security_score":48.5,"reliability_score":26.2,"package_type":"mcp_server","discovery_source":["github"],"priority":"high","status":"evaluated","version_evaluated":null,"last_evaluated":"2026-03-30T15:28:19.823073+00:00","interface":{"has_rest_api":false,"has_graphql":false,"has_grpc":false,"has_mcp_server":true,"mcp_server_url":null,"has_sdk":false,"sdk_languages":["TypeScript","JavaScript"],"openapi_spec_url":null,"webhooks":false},"auth":{"methods":["Per-server environment/configured credentials for Check Point management/related APIs (details not present in provided README)"],"oauth":false,"scopes":false,"notes":"The README states authentication keys/credentials are used only by the MCP server (not shared with the model), but does not specify the exact auth method(s) (e.g., API token vs. session vs. OAuth) or any scope granularity in the provided content."},"pricing":{"model":null,"free_tier_exists":false,"free_tier_limits":null,"paid_tiers":[],"requires_credit_card":false,"estimated_workload_costs":null,"notes":"No pricing information was provided for this GitHub repository/monorepo."},"requirements":{"requires_signup":false,"requires_credit_card":false,"domain_verification":false,"data_residency":[],"compliance":[],"min_contract":null},"agent_readiness":{"af_score":42.2,"security_score":48.5,"reliability_score":26.2,"mcp_server_quality":70.0,"documentation_accuracy":45.0,"error_message_quality":0.0,"error_message_notes":null,"auth_complexity":55.0,"rate_limit_clarity":20.0,"tls_enforcement":40.0,"auth_strength":55.0,"scope_granularity":30.0,"dependency_hygiene":45.0,"secret_handling":70.0,"security_notes":"The README includes a security notice claiming credentials are not shared with the model and warns against using untrusted clients. However, the provided content does not specify TLS requirements, auth mechanisms, scope granularity, secret-handling implementation details, or dependency/security posture (e.g., vulnerability management).","uptime_documented":0.0,"version_stability":45.0,"breaking_changes_history":40.0,"error_recovery":20.0,"idempotency_support":"false","idempotency_notes":null,"pagination_style":"none","retry_guidance_documented":false,"known_agent_gotchas":["Queried data is exposed to the model; ensure the MCP client/model is trusted and data-handling policy is enforced.","Server-specific configuration requirements exist, and the provided README does not include full per-server interface details.","Without visible rate-limit/error/retry guidance in the provided content, agents may need conservative request patterns."]}}