MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.
IRONSCALES_API_KEYAPI keyrequiredIronscales API key
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
ironscales_allowlist_manageAdd or remove entries from the sender allowlist. Allowlisted senders are never flagged as phishing threats. Supports email addresses, domains, and IP addresses.Add or remove entries from the sender allowlist. Allowlisted senders are never flagged as phishing threats. Supports email addresses, domains, and IP addresses.
No input schema was published for this tool.
ironscales_email_classifyClassify an email as phishing, spam, or legitimate using Ironscales AI analysis. Provide raw email headers and/or body content for analysis.Classify an email as phishing, spam, or legitimate using Ironscales AI analysis. Provide raw email headers and/or body content for analysis.
No input schema was published for this tool.
ironscales_incidents_listList phishing incidents. Returns a paginated list of incidents with their status, severity, and summary information.List phishing incidents. Returns a paginated list of incidents with their status, severity, and summary information.
No input schema was published for this tool.
ironscales_incidents_getGet detailed information about a specific phishing incident by its ID, including affected recipients, email headers, threat indicators, and timeline.Get detailed information about a specific phishing incident by its ID, including affected recipients, email headers, threat indicators, and timeline.
No input schema was published for this tool.
ironscales_navigateNavigate to a domain to see its available tools. Domains: incidents (phishing incidents), email (email classification), remediation (incident remediation), stats (company statistics), allowlist (sender allowlist management).Navigate to a domain to see its available tools. Domains: incidents (phishing incidents), email (email classification), remediation (incident remediation), stats (company statistics), allowlist (sender allowlist management).
No input schema was published for this tool.
ironscales_statusCheck Ironscales API connection status and available domains.Check Ironscales API connection status and available domains.
No input schema was published for this tool.
ironscales_backReturn to the domain navigation menu.Return to the domain navigation menu.
No input schema was published for this tool.
ironscales_remediation_actTake a remediation action on a phishing incident. Actions include quarantining emails, blocking senders, deleting messages from all mailboxes, or marking as false positive.Take a remediation action on a phishing incident. Actions include quarantining emails, blocking senders, deleting messages from all mailboxes, or marking as false positive.
No input schema was published for this tool.
ironscales_stats_companyGet dashboard statistics for the company, including incident counts, threat trends, top targeted users, most common attack types, and remediation summary over a time period.Get dashboard statistics for the company, including incident counts, threat trends, top targeted users, most common attack types, and remediation summary over a time period.
No input schema was published for this tool.
9 of 9 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.