sophos-central-mcp-server 0.5.0 (Cloudflare Workers, Streamable HTTP)

Endpoints (POST, JSON-RPC 2.0, Accept: application/json, text/event-stream):
  /mcp            all 288 tools (19 appear only for partner/org credentials)
  /mcp/readonly   151 tools annotated readOnlyHint
  /mcp/core       about 33 curated read-only tools for tenant health checks
  /health         GET, liveness

Authentication: Send Sophos Central API credentials in the X-Sophos-Credentials header as base64("clientId:clientSecret") or base64("clientId:clientSecret:tenantId"). Create them in Sophos Central > Global Settings > API Credentials Management.
initialize, ping and tools/list work without credentials; tools/call requires them.

Source: https://github.com/Aaronjacobs000/sophos-central-mcp