CISA M365 MCP Server
MCP server for CISA BOD 25-01 Microsoft 365 security controls. CISA M365 MCP Server is a Model Context Protocol (MCP) server maintained by DynamicEndpoints. It connects to MCP-compatible clients such as Claude Desktop, Cursor, Cline, and other agents that speak the protocol. It exposes 5 tools, including block_legacy_auth, block_high_risk_users, enforce_phishing_resistant_mfa, configure_global_admins and get_policy_status, that an agent can call directly. It is categorized under Security/Compliance, Cloud/Microsoft365 and Tool/Server.
What is this MCP
This MCP server implements CISA Binding Operational Directive 25-01 security controls for Microsoft 365 (Azure AD/Entra ID). It provides tools for configuring and managing Microsoft 365 security settings to meet federal compliance requirements.
How to use this MCP
The MCP can be installed via Smithery or manually configured with Azure AD application credentials. It exposes tools likeblock_legacy_auth and enforce_phishing_resistant_mfa that can be called via the MCP protocol to manage security policies.
What this MCP can be used for
This MCP is designed for organizations needing to comply with CISA BOD 25-01 requirements. It can be used to block legacy authentication, enforce MFA, manage privileged roles, configure application controls, and monitor compliance across Microsoft 365 environments.
AIMCP authority
DR and traffic signal for the AIMCP public domain.
Frequently asked questions
What is the CISA M365 MCP Server MCP server?
CISA M365 MCP Server is a Model Context Protocol server from DynamicEndpoints. It lets MCP-compatible AI clients call its tools over a standard interface, so agents like Claude, Cursor, and Cline can use it without custom integration.
How do I connect CISA M365 MCP Server to my AI client?
Add CISA M365 MCP Server to your client's MCP configuration using the stdio or SSE connection shown in the usage examples on this page, then restart the client to load the server.
What tools does CISA M365 MCP Server provide?
CISA M365 MCP Server provides 5 tools: block_legacy_auth, block_high_risk_users, enforce_phishing_resistant_mfa, configure_global_admins and get_policy_status.
Is CISA M365 MCP Server free to use?
CISA M365 MCP Server is listed on AIMCP for free. Any API keys or accounts required by the underlying service are set by its provider.
Vernclaw Plugins for OpenClaw
Ready-to-use connectors for SEO data, social reading & content generation. Pay-as-you-go credits with audit logs.