MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.
PROOFPOINT_SERVICE_SECRETClé d’APIobligatoireProofpoint TAP service secret
Déclaré par l’auteur dans le registre MCP officiel. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
La vérification confirme l’identité de l’éditeur (la propriété du dépôt), pas la sûreté du code. L’analyse de sécurité couvre les CVE connues et les scripts d’installation suspects.
Lu dans le code que npm livre réellement, au moment de l’analyse. Le paquet n’a jamais été exécuté. Les outils enregistrés dynamiquement à l’exécution, ou cachés dans du code empaqueté ou minifié, peuvent passer inaperçus — c’est donc un plancher de la surface d’outils, pas un recensement complet.
proofpoint_dlp_list_incidentsList DLP incidents. Returns messages that triggered DLP rules, including policy violations and sensitive data detections.List DLP incidents. Returns messages that triggered DLP rules, including policy violations and sensitive data detections.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_dlp_get_incidentGet detailed information about a specific DLP incident, including matched rules, sensitive data types, and message metadata.Get detailed information about a specific DLP incident, including matched rules, sensitive data types, and message metadata.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_dlp_list_encryptedList messages that were encrypted by Proofpoint Email Encryption. Shows encrypted message status and recipient access.List messages that were encrypted by Proofpoint Email Encryption. Shows encrypted message status and recipient access.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_events_listList spam, phishing, and malware detection events. Returns events where Proofpoint detected and acted on threats.List spam, phishing, and malware detection events. Returns events where Proofpoint detected and acted on threats.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_events_get_detailsGet detailed information about a specific detection event, including full threat analysis and message metadata.Get detailed information about a specific detection event, including full threat analysis and message metadata.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_events_get_statsGet detection event statistics. Returns counts of spam, phishing, malware, and impostor detections over a time period.Get detection event statistics. Returns counts of spam, phishing, malware, and impostor detections over a time period.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_forensics_get_threatGet forensic evidence for a specific threat. Returns behavioral analysis, network activity, file modifications, and other forensic indicators.Get forensic evidence for a specific threat. Returns behavioral analysis, network activity, file modifications, and other forensic indicators.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_forensics_get_campaignGet forensic evidence for all threats in a campaign. Returns aggregated behavioral analysis across all associated threats.Get forensic evidence for all threats in a campaign. Returns aggregated behavioral analysis across all associated threats.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_forensics_search_messagesSearch for messages across mailboxes for threat response. Used for search & destroy / auto-pull operations to find and remediate delivered threats.Search for messages across mailboxes for threat response. Used for search & destroy / auto-pull operations to find and remediate delivered threats.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_forensics_pull_messagesAuto-pull (search & destroy) messages from mailboxes. This is a destructive operation that removes delivered messages from user mailboxes.Auto-pull (search & destroy) messages from mailboxes. This is a destructive operation that removes delivered messages from user mailboxes.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_people_get_vapGet the Very Attacked People (VAP) report. Returns users who received the most attacks, ranked by attack index. Useful for identifying high-risk users.Get the Very Attacked People (VAP) report. Returns users who received the most attacks, ranked by attack index. Useful for identifying high-risk users.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_people_get_top_clickersGet top clickers report. Returns users who clicked on the most threat URLs, indicating users who may need additional security training.Get top clickers report. Returns users who clicked on the most threat URLs, indicating users who may need additional security training.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_people_get_user_riskGet the risk score and attack details for a specific user by email address.Get the risk score and attack details for a specific user by email address.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_policy_listList all email security policies. Returns policy names, types, and enabled status.List all email security policies. Returns policy names, types, and enabled status.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_policy_getGet detailed information about a specific policy including rules, conditions, and actions.Get detailed information about a specific policy including rules, conditions, and actions.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_policy_list_routesList email routing rules/routes. Shows how mail is routed based on policy configuration.List email routing rules/routes. Shows how mail is routed based on policy configuration.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_quarantine_listList quarantined messages. Returns messages held in quarantine with sender, recipient, subject, and reason.List quarantined messages. Returns messages held in quarantine with sender, recipient, subject, and reason.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_quarantine_searchSearch quarantine by keyword across sender, recipient, and subject fields.Search quarantine by keyword across sender, recipient, and subject fields.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_quarantine_release⚠ HIGH-IMPACT. Release a quarantined message, delivering it to the intended recipient.⚠ HIGH-IMPACT. Release a quarantined message, delivering it to the intended recipient.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_quarantine_deleteprivilégié⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently delete a quarantined message.⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently delete a quarantined message.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_reports_org_summaryGet organization security summary. Returns high-level metrics: total messages processed, threats blocked, quarantined, and delivered.Get organization security summary. Returns high-level metrics: total messages processed, threats blocked, quarantined, and delivered.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_reports_threat_summaryGet threat summary report. Breakdown of threats by type (spam, phishing, malware, impostor) with counts and trends.Get threat summary report. Breakdown of threats by type (spam, phishing, malware, impostor) with counts and trends.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_reports_mail_flowGet mail flow report. Shows email volume over time with breakdown by disposition (delivered, blocked, quarantined).Get mail flow report. Shows email volume over time with breakdown by disposition (delivered, blocked, quarantined).
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_reports_executive_summaryGet executive summary report. High-level security posture overview suitable for management reporting. Includes threat trends, top targeted users, and effectiveness metrics.Get executive summary report. High-level security posture overview suitable for management reporting. Includes threat trends, top targeted users, and effectiveness metrics.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_smart_search_traceTrace messages through the Proofpoint mail flow. Search by sender, recipient, subject, or message ID to track delivery status and processing history.Trace messages through the Proofpoint mail flow. Search by sender, recipient, subject, or message ID to track delivery status and processing history.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_smart_search_get_messageGet detailed information about a specific message including headers, processing log, and delivery details.Get detailed information about a specific message including headers, processing log, and delivery details.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_smart_search_get_headersGet the full email headers for a specific message.Get the full email headers for a specific message.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_tap_get_all_threatsGet all threats (messages and clicks) from the TAP SIEM API for a given time window. Returns both delivered/blocked messages and permitted/blocked clicks.Get all threats (messages and clicks) from the TAP SIEM API for a given time window. Returns both delivered/blocked messages and permitted/blocked clicks.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_tap_get_messages_deliveredGet messages delivered containing threats. These are messages that reached the recipient's mailbox despite containing identified threats.Get messages delivered containing threats. These are messages that reached the recipient's mailbox despite containing identified threats.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_tap_get_messages_blockedGet messages blocked that contained threats. These are messages quarantined or rejected before reaching the recipient.Get messages blocked that contained threats. These are messages quarantined or rejected before reaching the recipient.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_tap_get_clicks_permittedGet permitted clicks on threat URLs. These are clicks that were allowed through to the destination.Get permitted clicks on threat URLs. These are clicks that were allowed through to the destination.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_tap_get_clicks_blockedGet blocked clicks on threat URLs. These are clicks that were prevented from reaching the malicious destination.Get blocked clicks on threat URLs. These are clicks that were prevented from reaching the malicious destination.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_threat_get_campaignGet details of a specific threat campaign by campaign ID. Returns campaign actors, malware families, techniques, and associated messages.Get details of a specific threat campaign by campaign ID. Returns campaign actors, malware families, techniques, and associated messages.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_threat_get_by_idGet detailed information about a specific threat by its threat ID. Returns threat type, classification, and associated indicators.Get detailed information about a specific threat by its threat ID. Returns threat type, classification, and associated indicators.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_threat_list_familiesList known threat families tracked by Proofpoint. Returns malware family names, descriptions, and associated campaigns.List known threat families tracked by Proofpoint. Returns malware family names, descriptions, and associated campaigns.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_threat_get_iocsGet indicators of compromise (IOCs) for a specific campaign or time range. Returns URLs, IPs, domains, file hashes associated with threats.Get indicators of compromise (IOCs) for a specific campaign or time range. Returns URLs, IPs, domains, file hashes associated with threats.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_url_decodeDecode one or more Proofpoint URL Defense rewritten URLs back to the original URLs. Proofpoint rewrites URLs in emails for click-time protection; this tool reverses that encoding.Decode one or more Proofpoint URL Defense rewritten URLs back to the original URLs. Proofpoint rewrites URLs in emails for click-time protection; this tool reverses that encoding.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_url_analyzeAnalyze a URL for threats. Returns threat classification, risk score, and associated campaigns.Analyze a URL for threats. Returns threat classification, risk score, and associated campaigns.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_navigateDiscover available Proofpoint tools by domain. Returns tool names and descriptions for the selected domain. All tools are callable at any time — this is a help/discovery aid, not a prerequisite.Discover available Proofpoint tools by domain. Returns tool names and descriptions for the selected domain. All tools are callable at any time — this is a help/discovery aid, not a prerequisite.
Aucun schéma d’entrée n’a été publié pour cet outil.
proofpoint_statusShow credentials status and available domainsShow credentials status and available domains
Aucun schéma d’entrée n’a été publié pour cet outil.
40 outils sur 40 ont publié une description.
Les noms et descriptions d’outils sont écrits par l’éditeur et affichés tels quels, comme du texte inerte. Ce sont les chaînes qu’un client MCP transmet à un modèle, alors Forge y recherche des motifs d’injection de prompt — tout constat apparaît avec l’analyse de sécurité ci-dessus. « Privilégié » est une correspondance de mot-clé sur le nom de l’outil, pas un audit de ce qu’il fait : un nom anodin peut tout de même tout faire.
MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.
Les noms cliquables ouvrent l’index Forge de toutes les entrées observées exposant cet outil. Parcourir tous les outils indexés.
Cette entrée ne publie aucun paquet npm : Forge n'a donc pas d'arbre de dépendances pour elle. C'est une lacune de couverture — pas une affirmation qu'elle n'a aucune dépendance.