What is Fleet MCP?
Fleet MCP is a Model Context Protocol server that enables AI assistants to interact with Fleet Device Management for device management, security monitoring, and compliance enforcement. It provides tools for host management, live osquery queries, policy management, and software inventory tracking.
How to use Fleet MCP?
Install via uvx fleet-mcp run or pip install fleet-mcp, then configure your MCP client with Fleet server URL and API token. Set environment variables like FLEET_READONLY and FLEET_ALLOW_SELECT_QUERIES to control access. See client-specific configuration examples for Claude Desktop, Cursor, Cline, Continue, Zed, Windsurf, VS Code, Sourcegraph Cody, Augment Code, and LM Studio.
Key features of Fleet MCP
- Host management: list, search, query, and manage hosts across your fleet
- Live osquery execution: run real-time queries against hosts
- Policy management: create, update, and monitor compliance policies
- Software inventory: track installations and vulnerabilities across devices
- Team and user management: organize hosts and users into teams
- Read-only mode with optional SELECT-only query execution
Use cases of Fleet MCP
- IT teams performing device inventory and compliance audits across a managed fleet
- Security analysts running live osquery queries to detect anomalies or threats
- Developers automating device provisioning, software tracking, and policy enforcement
- Administrators monitoring fleet activities and reviewing audit logs
Comments