snipeit-mcp

MCP server for Snipe-IT asset management. Enables AI assistants to manage assets, consumables, accessories, licenses, users, and system configuration via 39 comprehensive tools.

→ jameshgordy/snipeit-mcp · listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

github_topic Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

38 tools verified — handlers match their declared behaviour

6 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: SNIPEIT_TOKEN, SNIPEIT_OAUTH_CLIENT_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configSNIPEIT_URL— Yes Your Snipe-IT instance URL

🔐 secretSNIPEIT_TOKEN— your-api-token-here

configMCP_TRANSPORT— Yes Must be http for OAuth mode

configMCP_HOST— =0.0.0.0 # defaults to 127.0.0.1

configMCP_PORT— Yes TCP port for the HTTP server

configSNIPEIT_OAUTH_CLIENT_ID— ... # from /admin/oauth

🔐 secretSNIPEIT_OAUTH_CLIENT_SECRET— ... # from /admin/oauth

configSNIPEIT_MCP_BASE_URL— Yes Public URL where this MCP server is reachable (used in the OAuth callback)

configSNIPEIT_MCP_REDIRECT_PATH— No Override OAuth callback path (default /auth/callback)

configLOG_LEVEL— No DEBUG/INFO/WARNING/ERROR/CRITICAL (default INFO)

configSNIPEIT_ALLOWED_TOOLS— manage_assets,system_info # Optional: restrict exposed tools

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/jameshgordy-snipeit-mcp-150bgl)](https://m8ven.ai/mcp/jameshgordy-snipeit-mcp-150bgl)

commit: 2d381e3fa7c01ac24d8fbbe0c7f00b91460e301a

code hash: aa68b2b5e2436df48965525ee8a60fdf98e5a7a590bdcb56f9b7243a9344ac13

verified: 6/18/2026, 10:36:33 AM

view raw JSON →