Netskope MCP server for AI agents

The Netskope Private Access (NPA) MCP server lets you manage your NPA infrastructure through AI-powered automation, providing tools for publishers, applications, policies, and more - all accessible through a Model Context Protocol interface.

Installation

Prerequisites

Before installing the NPA MCP server, you'll need:

Node.js installed on your system
Netskope tenant URL
Netskope API token with appropriate permissions

Environment Setup

Set up the required environment variables:

export NETSKOPE_BASE_URL="https://your-tenant.goskope.com"
export NETSKOPE_TOKEN="your-api-token"

Installation Methods

You can install the server using NPM:

npm install @johnneerdael/ns-private-access-mcp

Alternatively, you can clone and build the repository:

git clone https://github.com/johnneerdael/ns-private-access-mcp.git
cd ns-private-access-mcp
npm install
npm run build

Starting the Server

After installation, you can start the server:

npm start

Connecting to the MCP Server

To connect to the server via an MCP client, use the following configuration:

{
  "mcpServers": {
    "netskope-npa": {
      "command": "node",
      "args": ["/path/to/ns-private-access-mcp/build/index.js"],
      "env": {
        "NETSKOPE_BASE_URL": "https://your-tenant.goskope.com",
        "NETSKOPE_TOKEN": "your-api-token"
      }
    }
  }
}

Available Tools

The MCP server provides 84 specialized tools across multiple categories:

Publisher Tools (9)

Tools for infrastructure deployment and management

Private App Tools (15)

Tools for application lifecycle and configuration

Local Broker Tools (7)

Tools for network connectivity and routing

Policy Management Tools (6)

Tools for access control and security rules

Additional Tool Categories

SCIM Integration (5)
Upgrade Profiles (7)
Steering (3)
Alerts (2)
Search (2)
Validation (2)

Usage Examples

Setting Up NPA Infrastructure

This example shows how to set up complete NPA infrastructure for a new office:

Request: "Set up complete NPA infrastructure for our new London office"

The AI will execute a workflow that:

Creates a publisher with auto-upgrade profile
Configures local broker for internal routing
Sets up core business applications (CRM, ERP, File Server)
Creates access policies with SCIM group validation
Enables monitoring and discovery
Generates registration tokens for deployment

Emergency Security Response

For urgent security incidents:

Request: "URGENT: Security incident - lock down HR/Finance apps immediately"

The AI will:

Identify all HR/Finance applications
Create emergency policy group with high priority
Block access for all users except incident response team
Enhance security monitoring
Tag applications for tracking

Compliance Audit

For compliance assessments:

Request: "Perform comprehensive compliance audit of our NPA environment"

The AI will:

Audit publishers for version compliance
Identify applications without access policies
Validate SCIM group references
Generate compliance score and remediation plan
Create detailed findings report

Key Features

AI-Native Design

Tools optimized for LLM interaction
Automatic parameter validation
Rich error context for troubleshooting

Workflow Orchestration

Tools coordinate automatically
Built-in retry logic and error recovery
Transactional operations where possible

Production Readiness

Input validation using Zod schemas
Rate limiting and API quota management
Detailed logging and monitoring

How to install this MCP server

For Claude Code

To add this MCP server to Claude Code, run this command in your terminal:

claude mcp add-json "netskope-mcp" '{"command":"npx","args":["-y","@johnneerdael/netskope-mcp"],"env":{"NETSKOPE_BASE_URL":"https://your-tenant.goskope.com","NETSKOPE_API_KEY":"your-token"}}'

See the official Claude Code MCP documentation for more details.

For Cursor

There are two ways to add an MCP server to Cursor. The most common way is to add the server globally in the ~/.cursor/mcp.json file so that it is available in all of your projects.

If you only need the server in a single project, you can add it to the project instead by creating or adding it to the .cursor/mcp.json file.

Adding an MCP server to Cursor globally

To add a global MCP server go to Cursor Settings > Tools & Integrations and click "New MCP Server".

When you click that button the ~/.cursor/mcp.json file will be opened and you can add your server like this:

{
    "mcpServers": {
        "netskope-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@johnneerdael/netskope-mcp"
            ],
            "env": {
                "NETSKOPE_BASE_URL": "https://your-tenant.goskope.com",
                "NETSKOPE_API_KEY": "your-token"
            }
        }
    }
}

Adding an MCP server to a project

To add an MCP server to a project you can create a new .cursor/mcp.json file or add it to the existing one. This will look exactly the same as the global MCP server example above.

How to use the MCP server

Once the server is installed, you might need to head back to Settings > MCP and click the refresh button.

The Cursor agent will then be able to see the available tools the added MCP server has available and will call them when it needs to.

You can also explicitly ask the agent to use the tool by mentioning the tool name and describing what the function does.

For Claude Desktop

To add this MCP server to Claude Desktop:

1. Find your configuration file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Linux: ~/.config/Claude/claude_desktop_config.json

2. Add this to your configuration file:

{
    "mcpServers": {
        "netskope-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@johnneerdael/netskope-mcp"
            ],
            "env": {
                "NETSKOPE_BASE_URL": "https://your-tenant.goskope.com",
                "NETSKOPE_API_KEY": "your-token"
            }
        }
    }
}

3. Restart Claude Desktop for the changes to take effect