Koppla

What is Koppla?

Koppla is a Model Context Protocol (MCP) server for Active Directory that lets you manage users, groups, and computer objects using natural language. It is designed for use with Claude Desktop or other MCP-capable AI agents.

How to use Koppla?

Install Koppla with pip install koppla, then configure it using the interactive configuration manager (koppla-config configure) or by setting environment variables manually. Add the server to the mcpServers section of your Claude Desktop configuration file. Optionally test the connection with koppla-config test.

Key features of Koppla

• Query Active Directory in natural language
• Find inactive users, locked accounts, empty groups
• Add or remove users from security groups
• Update user attributes (description, title, department)
• Password encryption using Fernet symmetric encryption
• Automatic backups of Claude Desktop configuration before changes
• Write protection disabled by default; critical accounts protected

Use cases of Koppla

• List all users inactive for 90 days
• Add a user to a specific security group
• Find all members of a department
• Show all locked-out user accounts
• Identify users in group A but not group B

FAQ from Koppla

What is Koppla?

Koppla is an MCP server that enables natural‑language management of Active Directory users, groups, and computers through AI agents like Claude Desktop.

How do I install Koppla?

Install it with pip install koppla. Python 3.7 or higher is required.

Is my Active Directory data secure?

Yes. Koppla encrypts passwords using Fernet encryption, stores the key separately, disables write operations by default, and protects critical accounts. It also creates timestamped backups before modifying configuration.

How do I enable write operations?

Set the AD_WRITE_ENABLED environment variable to "true" in your server configuration.

What AD data is sent to AI models?

All AD data you query or modify is transmitted to the AI agent for processing. Koppla itself does not store the data, but AI agents may retain conversation history under their own policies. Review your organization’s data handling requirements before use.