Proofpoint

Overview

Proofpoint is an MCP server that integrates Proofpoint Threat Aware Protection (TAP) with AI assistants. It exposes threat intelligence, forensics, quarantine management, and email security capabilities as tools your AI can invoke directly, enabling automated investigation and response workflows.

The server runs locally via Docker using the image ghcr.io/wyre-ai/proofpoint-mcp:v1.1.5 and communicates over stdio. You'll need to provide your Proofpoint API credentials through the PROOFPOINT_SERVICE_PRINCIPAL and PROOFPOINT_SERVICE_SECRET environment variables. The project is open source under the Apache-2.0 license, maintained by WYRE-AI on GitHub.

Proofpoint appears in the Security category on mcp.site and works with Claude Desktop, Claude Code, Cursor, VS Code, and other MCP clients. If you maintain this server, claim the listing to earn a Verified badge and keep ownership.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "proofpoint": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/proofpoint-mcp:v1.1.5"
      ],
      "env": {
        "PROOFPOINT_SERVICE_PRINCIPAL": "<proofpoint-service-principal>",
        "PROOFPOINT_SERVICE_SECRET": "<proofpoint-service-secret>"
      }
    }
  }
}

Requires PROOFPOINT_SERVICE_PRINCIPAL, PROOFPOINT_SERVICE_SECRET