1. Conduid
  2. Developer Tools
  3. Fleet MCP
MCP server · Developer Tools

Fleet MCP

🚀 An Model Context Protocol (MCP) server for Fleet. Query OSQuery data, check compliance, and investigate CVEs natively from Claude, Cursor, and any MCP-compatible AI agent.

51Fair

Scored 4 months ago · breakdown

About Fleet MCP

Fleet MCP is an MCP server published by karmine05 in the Developer Tools category: 🚀 An Model Context Protocol (MCP) server for Fleet. Query OSQuery data, check compliance, and investigate CVEs natively from Claude, Cursor, and any MCP-compatible AI agent. It has been installed 0 times through Conduid.

The repository has 1 stars and 0 forks, with the last commit 6 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx fleet-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

Ask AI about Fleet MCP

Powered by Claude · Grounded in docs

I know everything about Fleet MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

Fleet MCP Server 🚀

A Model Context Protocol (MCP) server for the Fleet endpoint security platform.

Transform how you interact with your endpoint data. Query OSQuery, check compliance, and investigate CVEs natively from Claude, Cursor, and any MCP-compatible AI agent.

🔗 GitHub Repo: https://github.com/karmine05/fleet-mcp 🔗 Learn about MCP: https://modelcontextprotocol.io/ 🔗 Learn about Fleet: https://fleetdm.com/

#DevSecOps #CyberSecurity #AI #ModelContextProtocol #FleetDM #OSQuery #GoLang #OpenSource


📺 See it in Action

Watch 1 hr long walkthrough demonstrating how to use Claude Desktop to instantly write and run live OSQueries across your fleet.

Fleet MCP Walkthrough Demo

Overview

This server provides an MCP interface to Fleet, enabling AI systems (Claude Desktop, Claude Code, Cursor, and any MCP-compatible client) to natively interact with your Fleet deployment. Instead of raw API endpoints, it exposes typed Tools that AI agents can call directly — querying endpoints, running live OSQuery, checking compliance policies, and more.

Both SSE (Server-Sent Events) and stdio transports are supported.

Tools

Tool Description
get_endpoints List all hosts/endpoints enrolled in Fleet
get_host Get full details for a single host including labels, team, and platform info
get_queries List all saved Fleet queries
get_policies List all policies with pass/fail host counts
get_labels List all endpoint labels
get_aggregate_platforms Get system count broken down by OS platform (macOS/Windows/Linux)
get_total_system_count Get total count of active enrolled systems
get_policy_compliance Check compliance stats for a specific policy ID
get_vulnerability_impact Check how many systems are impacted by a CVE
prepare_live_query Step 1 of 2: Validate targets and get OSQuery schema before running a query
run_live_query Step 2 of 2: Execute an OSQuery SQL statement against live Fleet devices
create_saved_query Create a new saved query in Fleet
get_osquery_schema Get the OSQuery table schema for a given platform
get_vetted_queries Get a library of vetted CIS-8.1 compliance policy queries

Configuration

Configure the server using environment variables or a .env file.

Variable Default Description
PORT 8080 HTTP port for SSE transport
FLEET_BASE_URL https://localhost:8080 Base URL of your Fleet instance
FLEET_API_KEY (required) Fleet API token — see Fleet docs
LOG_LEVEL info Log verbosity: debug, info, warn, error
FLEET_TLS_SKIP_VERIFY false Skip TLS certificate verification. Dev/test only — do not use in production.
FLEET_CA_FILE (optional) Path to a PEM CA certificate for self-signed Fleet instances

Copy the provided example to get started:

cp .env.example .env
# Edit .env with your Fleet URL and API key

Installation

Prerequisites

  • Go 1.23+
  • A running Fleet instance
  • A Fleet API key with appropriate permissions

Build

git clone https://github.com/karmine05/fleet-mcp.git
cd fleet-mcp
go mod tidy
go build -o fleet-mcp .

Usage

SSE Transport (Claude Code, Cursor, web clients)

Start the server — it will listen for SSE connections:

./fleet-mcp
# Listening on :8080/sse

Configure your MCP client to connect to http://localhost:8080/sse.

For Claude Code, add to your project's .mcp.json or global MCP config:

{
  "mcpServers": {
    "fleet": {
      "type": "sse",
      "url": "http://localhost:8080/sse"
    }
  }
}

Stdio Transport (Claude Desktop)

Stdio mode runs the binary directly as a subprocess with no network port needed.

  1. Build the binary: go build -o fleet-mcp .
  2. Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):
{
  "mcpServers": {
    "fleet": {
      "command": "/path/to/fleet-mcp",
      "args": ["-transport", "stdio"],
      "env": {
        "FLEET_BASE_URL": "https://your-fleet.example.com",
        "FLEET_API_KEY": "YOUR_FLEET_API_KEY",
        "LOG_LEVEL": "info"
      }
    }
  }
}
  1. Relaunch Claude Desktop. The Fleet tools will appear in your context.

Development

Adding a New Tool

  1. Add a method to FleetClient in fleet_integration.go
  2. Register the tool via mcp.NewTool in SetupMCPServer in mcp_server.go

License

MIT

README mirrored from the source repository 4 months ago. The original is authoritative.

Questions

About Fleet MCP

How do I install Fleet MCP?

Run npx fleet-mcp, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Fleet MCP safe to use with an AI agent?

Its trust score is 51 out of 100 (fair). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Fleet MCP still maintained?

The last commit was 6 months ago, with 0 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.