MCP server for Kaseya SaaS Alerts — SaaS security monitoring for M365 & Google Workspace.
SAAS_ALERTS_API_KEYAPI keyrequiredSaaS Alerts API key (sent as the api_key header). Required.
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
saas_alerts_billing_get_detailsRetrieve billing details for a specific billing date.Retrieve billing details for a specific billing date.
No input schema was published for this tool.
saas_alerts_billing_list_datesList all available billing dates for the authenticated partner.List all available billing dates for the authenticated partner.
No input schema was published for this tool.
saas_alerts_customers_listList all SaaS Alerts customers for the authenticated partner.List all SaaS Alerts customers for the authenticated partner.
No input schema was published for this tool.
saas_alerts_customers_getGet a single SaaS Alerts customer by ID.Get a single SaaS Alerts customer by ID.
No input schema was published for this tool.
saas_alerts_customers_createCreate a new SaaS Alerts customer for the authenticated partner.Create a new SaaS Alerts customer for the authenticated partner.
No input schema was published for this tool.
saas_alerts_customers_updateUpdate an existing SaaS Alerts customer by ID.Update an existing SaaS Alerts customer by ID.
No input schema was published for this tool.
saas_alerts_customers_deleteprivileged⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently deletes a SaaS Alerts customer and all associated data.⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently deletes a SaaS Alerts customer and all associated data.
No input schema was published for this tool.
saas_alerts_customers_set_whitelists⚠ HIGH-IMPACT. Replace the IP/country whitelist for a customer.⚠ HIGH-IMPACT. Replace the IP/country whitelist for a customer.
No input schema was published for this tool.
saas_alerts_customers_set_account_whitelists⚠ HIGH-IMPACT. Replace the account-level whitelist for a customer.⚠ HIGH-IMPACT. Replace the account-level whitelist for a customer.
No input schema was published for this tool.
saas_alerts_devices_list_mappedList devices that have been mapped (unified) to SaaS Alerts customer organizations.List devices that have been mapped (unified) to SaaS Alerts customer organizations.
No input schema was published for this tool.
saas_alerts_devices_list_unmappedList devices that have NOT yet been mapped to a SaaS Alerts organization.List devices that have NOT yet been mapped to a SaaS Alerts organization.
No input schema was published for this tool.
saas_alerts_devices_list_ignoredList devices that have been explicitly marked as ignored.List devices that have been explicitly marked as ignored.
No input schema was published for this tool.
saas_alerts_devices_list_orgsList all device organizations visible to the authenticated partner.List all device organizations visible to the authenticated partner.
No input schema was published for this tool.
saas_alerts_events_queryQuery security events from SaaS Alerts with optional filters.Query security events from SaaS Alerts with optional filters.
No input schema was published for this tool.
saas_alerts_events_countCount security events matching the given filters without fetching full records.Count security events matching the given filters without fetching full records.
No input schema was published for this tool.
saas_alerts_events_query_advancedExecute an advanced Elasticsearch query against the SaaS Alerts events index.Execute an advanced Elasticsearch query against the SaaS Alerts events index.
No input schema was published for this tool.
saas_alerts_events_count_advancedCount events using a raw Elasticsearch query body without fetching full records.Count events using a raw Elasticsearch query body without fetching full records.
No input schema was published for this tool.
saas_alerts_events_scrollContinue paginating through a previous event query result set using a scroll ID.Continue paginating through a previous event query result set using a scroll ID.
No input schema was published for this tool.
saas_alerts_recommended_actionsGet the list of recommended remediation actions for SaaS Alerts event types.Get the list of recommended remediation actions for SaaS Alerts event types.
No input schema was published for this tool.
saas_alerts_navigateBrowse a domain to see its available tools and descriptions.Browse a domain to see its available tools and descriptions.
No input schema was published for this tool.
saas_alerts_statusCheck connectivity to SaaS Alerts by fetching the authenticated MSP user.Check connectivity to SaaS Alerts by fetching the authenticated MSP user.
No input schema was published for this tool.
saas_alerts_partner_get_profileGet the partner profile associated with the authenticated API key.Get the partner profile associated with the authenticated API key.
No input schema was published for this tool.
saas_alerts_partner_update_branding⚠ HIGH-IMPACT. Update the partner branding settings (logo, colours, etc.).⚠ HIGH-IMPACT. Update the partner branding settings (logo, colours, etc.).
No input schema was published for this tool.
saas_alerts_reports_list_scheduledList all scheduled reports configured for the authenticated partner.List all scheduled reports configured for the authenticated partner.
No input schema was published for this tool.
saas_alerts_reports_get_scheduledGet a specific scheduled report by its ID.Get a specific scheduled report by its ID.
No input schema was published for this tool.
saas_alerts_reports_create_scheduledCreate a new scheduled report.Create a new scheduled report.
No input schema was published for this tool.
saas_alerts_reports_delete_scheduledprivileged⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently delete a scheduled report.⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently delete a scheduled report.
No input schema was published for this tool.
saas_alerts_users_get_mspGet the MSP user profile associated with the authenticated API key.Get the MSP user profile associated with the authenticated API key.
No input schema was published for this tool.
saas_alerts_users_list_partnerList all users associated with the authenticated partner account.List all users associated with the authenticated partner account.
No input schema was published for this tool.
saas_alerts_users_list_by_customerList all users belonging to a specific SaaS Alerts customer.List all users belonging to a specific SaaS Alerts customer.
No input schema was published for this tool.
alert-triageTriage SaaS Alerts security events — query critical events, rank by impact, cross-ref recommended actionsTriage SaaS Alerts security events — query critical events, rank by impact, cross-ref recommended actions
No input schema was published for this tool.
customer-alert-summarySummarise security alerts for a specific customer over a time windowSummarise security alerts for a specific customer over a time window
No input schema was published for this tool.
customer_idSaaS Alerts customer IDSaaS Alerts customer ID
No input schema was published for this tool.
cross-tenant-anomalyUse advanced Elasticsearch queries to find an event pattern across all customersUse advanced Elasticsearch queries to find an event pattern across all customers
No input schema was published for this tool.
event_typeEvent type to investigate across customersEvent type to investigate across customers
No input schema was published for this tool.
35 of 35 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for Kaseya SaaS Alerts — SaaS security monitoring for M365 & Google Workspace.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.