Skip to content
Agentmart
Submit a tool

Inforcer

Read-only MCP server for Inforcer M365 baseline governance, plus assessment and report runs.

Connector by wyre-technology · GitHub account verified by the MCP Registry

IndexedLicense unknownLocal (stdio)★ 1
Write a review

Chalk Labs

Need help deploying Inforcer?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/wyre-technology-inforcer-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Read-only MCP server for Inforcer M365 baseline governance, plus assessment and report runs.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Nov 1, 2026.

Tools
21 read · 3 write · 0 delete
Secrets
1 (API keys, tokens or passwords)
Install scripts
None found
Runs as
Docker image

Tools by what they do 24

Read from the source code; the running server may list different tools.

Read 21 · Look things up without changing anything.

  • inforcer_alignment_details
  • inforcer_alignment_scores
  • inforcer_assessments_list
  • inforcer_audit_event_types
  • inforcer_audit_search
  • inforcer_baselines_list
  • inforcer_groups_get
  • inforcer_groups_list
  • inforcer_policies_list
  • inforcer_reports_download_output
  • inforcer_reports_run_status
  • inforcer_reports_runs_list
Show 9 more tools
  • inforcer_reports_types_list
  • inforcer_roles_list
  • inforcer_secure_scores_get
  • inforcer_status
  • inforcer_tenants_get
  • inforcer_tenants_list
  • inforcer_tenants_resolve
  • inforcer_users_get
  • inforcer_users_list

Write 3 · Create, change, send or run things.

  • inforcer_assessments_run
  • inforcer_navigate
  • inforcer_reports_run

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • INFORCER_API_KEY

Other settings (environment variables or headers).

  • AUTH_MODE
  • INFORCER_REGION
  • LOG_LEVEL
  • MCP_TRANSPORT

Network hosts it talks to 2

  • github.com · found in code
  • glama.ai · found in code

Tools (24)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • inforcer_alignment_detailsread-only

    Get detailed baseline-alignment drift for a tenant. Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Read-only.

  • inforcer_alignment_scoresread-only

    List baseline alignment scores across tenants. Read-only.

  • inforcer_assessments_listread-only

    List the assessments available to run (use to discover assessment IDs). Read-only.

  • inforcer_assessments_runRun assessment (high-impact)

    ⚠ HIGH-IMPACT. Triggers an assessment run for a tenant. This is not destructive, but it kicks off real work in Inforcer and is visible to operators. Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Confirm with the user before invoking.

  • inforcer_audit_event_typesread-only

    List the audit event types available for filtering the activity log. Read-only.

  • inforcer_audit_searchread-only

    Search the Inforcer activity (audit) log. All filters are optional; returns a page of events plus a continuation token for paging. Read-only.

  • inforcer_baselines_listread-only

    List baseline groups and their members. Optionally filter by the baseline (owner) tenant ID. Read-only.

  • inforcer_groups_getread-only

    Get full detail for a single group, including members. Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Read-only.

  • inforcer_groups_listread-only

    List Entra ID group summaries for a tenant (paginated). Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Read-only.

  • inforcer_navigate

    Discover available Inforcer tools by domain. Returns tool names and descriptions for the selected domain. All tools are callable at any time — this is a help/discovery aid, not a prerequisite.

  • inforcer_policies_listread-only

    List policies for a tenant. Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Read-only.

  • inforcer_reports_download_outputread-only

    Download a single finished report output (discovered via inforcer_reports_run_status). Returns the file content base64-encoded along with its filename and content type. Read-only.

  • inforcer_reports_runQueue report run (high-impact)

    ⚠ HIGH-IMPACT. Queues one or more reports across one or more tenants. This is not destructive, but it kicks off real report-generation work in Inforcer. Reports run asynchronously — use inforcer_reports_run_status to poll the returned run(s) to completion, then inforcer_reports_download_output to fetch each finished output. Confirm with the user before invoking.

  • inforcer_reports_run_statusread-only

    Poll a report run. Returns isTerminal:false with no outputs while the run is still in progress, or isTerminal:true with the list of downloadable outputs once it finishes. Read-only.

  • inforcer_reports_runs_listread-only

    List queued and completed report runs. Read-only.

Show 9 more tools
  • inforcer_reports_types_listread-only

    List the catalog of available report types — key, supported output formats, whether the type is collatable (single cross-tenant output), and accepted parameters. Use to discover valid (type, output_format) pairs before calling inforcer_reports_run. Read-only.

  • inforcer_roles_listread-only

    List Entra ID directory role definitions for a tenant. Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Read-only.

  • inforcer_secure_scores_getread-only

    Get the Microsoft Secure Score data for a tenant. Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Read-only.

  • inforcer_status

    Check Inforcer API connectivity and available domains. Performs a live baselines.list() call as a read-only connectivity check.

  • inforcer_tenants_getread-only

    Get a single tenant. Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Ambiguous names throw a clear error. Read-only.

  • inforcer_tenants_listread-only

    List all managed tenants. Read-only.

  • inforcer_tenants_resolveread-only

    Resolve a tenant name, DNS name, or Azure AD GUID to its numeric Inforcer Client Tenant ID (which is NOT the Azure AD tenant GUID). Read-only.

  • inforcer_users_getread-only

    Get full detail for a single user. Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Read-only.

  • inforcer_users_listread-only

    List Entra ID user summaries for a tenant (paginated). Tenant identifier — accepts a numeric Client Tenant ID, a tenant DNS name, an Azure AD tenant GUID, or a friendly name. Resolved to the numeric Client Tenant ID before the request. Read-only.

Signals

Stars
1
Forks
2
Open issues
0
Last commit
Oct 14, 2026 (25 days ago)
Last release
Oct 14, 2026 (25 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name
io.github.wyre-technology/inforcer-mcp
Version
1.1.0
Auth
API key
Packages
oci ghcr.io/wyre-technology/inforcer-mcp:v1.1.0
License
License unknown
Repository
github.com/wyre-technology/inforcer-mcp
Website
github.com/wyre-technology/inforcer-mcp
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
Official MCP Registrygithub-graphql

More from wyre-technology

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped
50+
launches shipped
media placements
500+
media placements
founders on every account
2
founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get Inforcer running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Goes to the Chalk Labs founders, not the newsletter. Privacy

Need help deploying Inforcer?

CallGet help
Cite this page

Inforcer MCP server. Agent Mart. https://agentmart.dev/connectors/wyre-technology-inforcer-mcp (last updated 2026-10-24)