Check Point - Workforce AI MCP Server

An MCP (Model Context Protocol) server that exposes Check Point Workforce AI capabilities as LLM tools — enabling AI assistants to query, analyze, and manage AI & Browse security policies, assets, and applications through natural language.

Getting started

Obtaining API credentials

1. Go to the Infinity Portal API Keys page.
2. Click New > New Account API Key.
3. In the Service dropdown select Workforce AI Security (and for Browse, Browse Security) and create the key.
4. Copy the Client ID, Secret Key, and Authentication URL (gateway).

For more information, see Infinity Portal Administration Guide.

Available gateways

| Region | Gateway URL | |---|---| | Europe | https://cloudinfra-gw.portal.checkpoint.com | | United States | https://cloudinfra-gw-us.portal.checkpoint.com |

Environment variables

| Variable | Required | Description | |---|---|---| | CP_CI_CLIENT_ID | Yes | CloudInfra API key client ID | | CP_CI_ACCESS_KEY | Yes | CloudInfra API key secret | | CP_CI_GATEWAY | Yes | CloudInfra gateway URL | | MCP_MODE | Yes | Transport mode: stdio or http | | PORT | When http | HTTP server port | | WRITE_MODE | No | Set to true to enable write tools (default: false). Warning: enabling write mode allows the LLM to create, modify, and delete security policy rules. Use with caution. |

Running with stdio transport

Use stdio mode when connecting directly from an MCP client such as Claude Desktop, VS Code, or Cursor:

CP_CI_CLIENT_ID="your-client-id" \
CP_CI_ACCESS_KEY="your-access-key" \
CP_CI_GATEWAY="https://cloudinfra-gw-us.portal.checkpoint.com" \
MCP_MODE=stdio \
npx @chkp/workforce-ai-mcp

Claude Desktop configuration

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "workforce-ai": {
      "command": "npx",
      "args": ["--yes", "@chkp/workforce-ai-mcp"],
      "env": {
        "CP_CI_CLIENT_ID": "your-client-id",
        "CP_CI_ACCESS_KEY": "your-access-key",
        "CP_CI_GATEWAY": "https://cloudinfra-gw-us.portal.checkpoint.com",
        "MCP_MODE": "stdio"
      }
    }
  }
}

Running with HTTP transport

Use HTTP mode when running the server as a standalone service:

CP_CI_CLIENT_ID="your-client-id" \
CP_CI_ACCESS_KEY="your-access-key" \
CP_CI_GATEWAY="https://cloudinfra-gw-us.portal.checkpoint.com" \
MCP_MODE=http \
PORT=3000 \
npx @chkp/workforce-ai-mcp

The server exposes:

• POST /mcp — MCP StreamableHTTP endpoint
• GET /health — Health check

Capabilities

Read mode (default)

By default, the server starts in read-only mode, exposing tools for querying and analyzing policies without making any changes. This is safe for exploration and auditing.

Policy inspection

• List rulebases — View all rules for Chats (GenAI DLP), AI Access, Web Access, Agents, Secure Browsing, and DLP policies
• Analyze shadow rules — Detect rules that are shadowed (never matched) by higher-priority rules
• Simulate policy matching — Given a user and target, resolve which rule in the rulebase would apply

Assets and users

• Search assets — Find managed assets by name or attributes
• Count assets — Get asset counts with optional filters
• Search users — Look up users and groups in the organization

Applications and data types

• Search apps — Search the GenAI application catalog by name, description, or URL
• Get apps by ID — Retrieve application details by their IDs
• List DLP data types — Browse predefined and custom DLP data types
• Get tenant DLP data types — View data types configured for the tenant

Policy objects

• List domain objects — View domain-based policy objects
• List file protection objects — View file protection configurations

Write mode

To enable write operations, set WRITE_MODE=true. This unlocks tools that modify the policy configuration:

Rule management

• Create rules — Create new Chats, AI Access, Agents, DLP, and Secure Browsing rules with full policy configuration including actions, services, data types, and user/group assignments
• Edit rules — Update rule name, description, and other properties
• Activate / deactivate rules — Toggle rules on or off
• Reorder rules — Change rule priority in the rulebase
• Delete rules — Permanently remove rules from the rulebase

Available tools

| Tool | Description | Mode | |---|---|---| | list_chats_rules | List all Chats (GenAI DLP) rules. | read | | list_ai_access_rules | List all AI Access rules that control which AI services and applications users are allowed to interact with. | read | | list_web_access_rules | List all Web Access rules for Browse Security. | read | | list_agents_rules | List all Agents (MCP Server) rules that govern agent interactions. | read | | list_secure_browsing_rules | List all Secure Browsing threat-prevention rules. | read | | list_dlp_rules | List all Browse DLP (Data Loss Prevention) rules for browser security. | read | | set_rule_info | Update the display name and description of a rule identified by its UUID. | write | | set_rule_active | Enable or disable a rule without deleting it. | write | | reorder_rule | Move a rule to a new position in the rulebase. | write | | delete_rule | Permanently delete a rule from the rulebase by its UUID. | write | | create_chats_rule | Create a new Chats (GenAI DLP) rule. | write | | create_ai_access_rule | Create a new AI Access rule that controls which AI services and applications users can interact with. | write | | create_agents_rule | Create a new Agents (MCP Server) rule that governs agent interactions. | write | | create_dlp_rule | Create a new Browse DLP rule for data loss prevention during web browsing. | write | | create_secure_browsing_rule | Create a new Secure Browsing threat-prevention rule. | write | | set_chats_policy | Replace the entire policy configuration of a Chats rule (also known as 'Chats' in AI Security UI — POLICY_TYPE_DLP). | write | | patch_chats_policy | Deep-merge partial changes into a Chats rule's policy. | write | | set_access_policy | Replace the entire policy configuration of an AI Access rule (POLICY_TYPE_ACCESS). | write | | patch_access_policy | Deep-merge partial changes into an AI Access rule's policy. | write | | set_agents_policy | Replace the entire policy configuration of an Agents rule (also known as 'Agents' — POLICY_TYPE_MCP_SERVER). | write | | patch_agents_policy | Deep-merge partial changes into an Agents rule's policy. | write | | set_secure_browsing_policy | Replace the entire policy configuration of a Secure Browsing rule (POLICY_TYPE_THREAT_PREVENTION). | write | | patch_secure_browsing_policy | Deep-merge partial changes into a Secure Browsing rule's policy. | write | | set_rule_source | Replace the full source (user/group assignments) list of a rule. | write | | set_rule_objects | Replace all objects attached to a rule for a specific feature. | write | | list_file_protection_objects | List all file-protection policy objects. | read | | update_file_protection_object | Update an existing file-protection object. | write | | create_file_protection_object | Create a new file-protection object. | write | | list_domains_objects | List all domains policy objects. | read | | update_domains_object | Update an existing domains object. | write | | create_domains_object | Create a new domains object containing a list of domain entries for domain-based filtering (allow/block lists). | write | | delete_object | Permanently delete a policy object (file-protection or domains) by its UUID. | write | | get_tenant_dlp_datatypes | Get the tenant-specific DLP datatype configuration showing which data types are currently enabled for detection in this tenant's policies.. | read | | search_dlp_datatypes | Search DLP data types by name or description with pagination. | read | | analyze_shadow_rules | Find unreachable (shadowed) rules in a rulebase. | read | | resolve_matching_rule | Given a user and target, determine which rule in the rulebase would apply. | read | | search_assets | Search deployed assets (endpoints/devices) with optional filtering, sorting, text search, and pagination. | read | | count_assets | Get the total count of deployed assets, optionally filtered. | read | | search_users | Search users in the organization with optional text search and pagination. | read | | search_apps | Search the GenAI apps catalog by name, description, or URL. | read | | get_apps_by_ids | Get specific GenAI apps from the catalog by their numeric IDs. | read |

Report Bug

In case of an issue or a bug found in the MCP server, please open an issue.

Contributors

• Haim Kastner - [email protected]