MCP server for Kaseya VSA RMM — agents, patches, procedures, alarms, tickets.
KASEYA_VSA_PASSWORDAPI keyoptionalLocal-auth password (omit if using Kaseya One token)
KASEYA_VSA_K1_TOKENAPI keyoptionalKaseya One SSO token (alternative to username + password)
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
kaseya_vsa_list_agentsList managed endpoints (agents) in the Kaseya VSA tenant. Supports OData $filter, $top, $skip. If no filter is provided, the user is prompted to choose a scope.List managed endpoints (agents) in the Kaseya VSA tenant. Supports OData $filter, $top, $skip. If no filter is provided, the user is prompted to choose a scope.
No input schema was published for this tool.
kaseya_vsa_get_agentGet details for a managed endpoint by agent ID.Get details for a managed endpoint by agent ID.
No input schema was published for this tool.
kaseya_vsa_get_software_inventoryGet installed software for an endpoint (audit data).Get installed software for an endpoint (audit data).
No input schema was published for this tool.
kaseya_vsa_get_hardware_inventoryGet hardware audit data for an endpoint.Get hardware audit data for an endpoint.
No input schema was published for this tool.
kaseya_vsa_get_patch_statusprivilegedGet patch status (pending and installed) for an endpoint.Get patch status (pending and installed) for an endpoint.
No input schema was published for this tool.
kaseya_vsa_deploy_patches_nowForce a patch deploy on an endpoint immediately. DESTRUCTIVE: requires user confirmation.Force a patch deploy on an endpoint immediately. DESTRUCTIVE: requires user confirmation.
No input schema was published for this tool.
kaseya_vsa_list_proceduresList agent procedures available to run on an endpoint.List agent procedures available to run on an endpoint.
No input schema was published for this tool.
kaseya_vsa_run_procedureExecute an agent procedure on an endpoint. DESTRUCTIVE: requires user confirmation.Execute an agent procedure on an endpoint. DESTRUCTIVE: requires user confirmation.
No input schema was published for this tool.
kaseya_vsa_list_alarmsList alarms. Accepts optional OData $filter (e.g. "State eq 'open'"); if omitted the user is prompted for a state.List alarms. Accepts optional OData $filter (e.g. "State eq 'open'"); if omitted the user is prompted for a state.
No input schema was published for this tool.
kaseya_vsa_list_ticketsList Service Desk tickets. Returns a friendly message if the Service Desk module is not enabled on the tenant.List Service Desk tickets. Returns a friendly message if the Service Desk module is not enabled on the tenant.
No input schema was published for this tool.
kaseya_vsa_list_organizationsList organizations defined in the tenant.List organizations defined in the tenant.
No input schema was published for this tool.
kaseya_vsa_list_machine_groupsList machine groups (organization → group hierarchy).List machine groups (organization → group hierarchy).
No input schema was published for this tool.
12 of 12 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for Kaseya VSA RMM — agents, patches, procedures, alarms, tickets.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.