Automox MCP Server

Official MCP server for Automox. Manage devices, patches, and policies in natural language.

→ AutomoxCommunity/automox-mcp· pypi: automox-mcp· listed on official

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Official PulseMCP Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

133 tools verified — handlers match their declared behaviour

73 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: AUTOMOX_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAUTOMOX_MCP_API_KEYS— No — Comma-separated MCP endpoint API keys for HTTP/SSE Bearer-token auth (e.g., key1,label:key2)

configAUTOMOX_MCP_API_KEY_FILE— No — Path to a file containing MCP endpoint API keys (one per line)

configAUTOMOX_MCP_VERSION

🔐 secretAUTOMOX_API_KEY— your-api-key

configAUTOMOX_ACCOUNT_UUID— your-account-uuid

configAUTOMOX_ORG_ID— your-org-id

configAUTOMOX_ORG_UUID

configAUTOMOX_MCP_SKIP_DOTENV— stdio-env =1

configAUTOMOX_MCP_LOG_FORMAT— No text Log format: text or json (structured JSON for SIEM integration)

configAUTOMOX_MCP_SANITIZE_RESPONSES— No true Sanitize API data to mitigate prompt injection

configAUTOMOX_MCP_READ_ONLY— No false Disable all write operations (85 of 133 tools remain)

configAUTOMOX_MCP_ALLOW_APPLY_REMEDIATION_ACTIONS— No false Opt in to the apply_remediation_actions tool, which patches/runs worklets on endpoints immediately. Off by default even in write mode.

configAUTOMOX_MCP_ALLOW_SPLASHTOP_BULK_INSTALL_UNINSTALL— No false Opt in to the splashtop_bulk_install_uninstall tool, which installs/uninstalls the Splashtop client across an entire server group in one call. Off by default even in write mode.

configAUTOMOX_MCP_ALLOW_UPLOAD_POLICY_FILE

configAUTOMOX_MCP_TRANSPORT— No stdio Transport: stdio, http, sse, or streamable-http

configAUTOMOX_MCP_ALLOW_DELETE_DEVICE

configAUTOMOX_MCP_TOOL_PREFIX— No — Prefix all tool names (e.g., automox) to prevent cross-server collisions

configAUTOMOX_MCP_MODULES— No all Comma-separated list of modules to load (see below)

configAUTOMOX_MCP_TOKEN_BUDGET— No 4000 Max estimated tokens per response before truncation

configAUTOMOX_MCP_UPLOAD_ALLOWED_DIRS— No — Comma-separated absolute directories upload_policy_file may read installers from. Required for that tool to register; paths are canonicalized and must resolve inside an allowed dir.

configAUTOMOX_MCP_UPLOAD_MAX_BYTES— No 10737418240 Max installer size for upload_policy_file (default 10 GB, Automox's ceiling).

configAUTOMOX_MCP_UPLOAD_TIMEOUT_SECONDS— No 3600 Upload read/write timeout for upload_policy_file (large installers need more than the default request timeout).

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/automox-mcp-ofkygf)](https://m8ven.ai/mcp/automox-mcp-ofkygf)

commit: 82da5351557bfa45c9de25bf9d67519966451a2d

code hash: 3f9d967b32d4320f912a319f74881ebe3f8ccdde8c6f09bce24d08ca7f071b57

verified: 6/15/2026, 3:10:41 PM

view raw JSON →