ESET-MCP

Item: ESET-MCP
Rating: 73
Author: M8ven

A Model Context Protocol server for managing ESET security products (cloud and on-prem) from any MCP host, providing tools, resources, and prompts for comprehensive ESET management.

→ maciekaz/ESET-MCP · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: ESET_PASSWORD, ESET_ONPREM_CF_ACCESS_CLIENT_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configESET_AUTH_MODE— env - single tenant, credentials from .env.

configESET_MCP_TRANSPORT— stdio stdio or http

configESET_USER— env stdio or http .env ( / ESET_PASSWORD)

🔐 secretESET_PASSWORD— env stdio or http .env (ESET_USER / )

configESET_DEPLOYMENT— cloud cloud (ESET Connect) or onprem (customer-hosted PROTECT)

configESET_ONPREM_SERVER_URL— env Static: ESET_DEPLOYMENT (cloud) or ESET_DEPLOYMENT=onprem +

configESET_ONPREM_CF_ACCESS_CLIENT_ID— Cloudflare Access Service Token client-id (on-prem behind CF)

🔐 secretESET_ONPREM_CF_ACCESS_CLIENT_SECRET— Cloudflare Access Service Token client-secret (paired with the above)

configESET_MODE— RO → catalog exposes only read-only tools (51 total).

configESET_REGION— eu / de / us / ca / jpn. Fixed via in env mode;

configESET_MCP_HTTP_HOST— 127.0.0.1 HTTP bind address

configESET_MCP_HTTP_PORT— 8765 HTTP port

configESET_LOG_LEVEL— Quieting in production: set =WARNING to mute the

configESET_MCP_RESPONSE_BYTES_MAX— Byte cap (, default 100 KB) - if a

configESET_ONPREM_VERIFY_SSL— true Set false for on-prem consoles with self-signed certs

configESET_MCP_LOG_FORMAT— prod log shippers via =json. Every tool call,

configESET_MCP_METRICS_ENABLED— (=true, requires

configESET_MCP_METRICS_PATH— /metrics Where to mount the metrics endpoint

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/maciekaz-eset-mcp-cctdip)](https://m8ven.ai/mcp/maciekaz-eset-mcp-cctdip)

commit: 1d1d9669e3bb38bb1c1a94c3a29d4e8a41ee0d1d

code hash: bc32fa220d7b9c27a7189debf75de5b0fe6b1bd12b19a67f778ce2631dd20ada

verified: 7/30/2026, 8:58:11 AM

view raw JSON →