sophos | Type: Application (parent with child servers) | PCID required: Yes
sophos-central is exposed as multiple MCP server IDs (one per area below). Each child server has its own server path and tool names.
Child servers
| Child server | Server path | Tools | Description |
|---|---|---|---|
| sophos-central-alerts | /sophos-central-alerts | 13 | Sophos Alerts & Cases — security alerts, investigation cases, detections, and MITRE ATT&CK analysis |
| sophos-central-directory | /sophos-central-directory | 15 | Sophos Directory — users, user groups, administrators, and roles |
| sophos-central-endpoints | /sophos-central-endpoints | 16 | Sophos Endpoint Protection — manage endpoints, endpoint groups, scans, isolation, and tamper protection |
| sophos-central-firewall | /sophos-central-firewall | 10 | Sophos Firewall Management — managed firewalls, firewall groups, and actions |
| sophos-central-mobile | /sophos-central-mobile | 10 | Sophos Mobile — mobile device management, device groups, and enrollment |
| sophos-central-policies | /sophos-central-policies | 15 | Sophos Policies & Exclusions — endpoint policies, scanning exclusions, and allow/block lists |