checkpoint/argos-erm-mcp repository overview

⁠Argos External Risk Management MCP Server

Transform your AI assistant into an intelligent cybersecurity analyst with direct access to Cyberint's Argos threat intelligence platform through the Model Context Protocol (MCP).

What you can do:

• Investigate security alerts with natural language queries
• Enrich IOCs (IPs, domains, URLs, file hashes) with threat intelligence
• Analyze asset vulnerabilities and risk exposure
• Monitor credential leaks and data breaches
• Generate executive security reports automatically

⁠Prerequisites

Before installing, ensure you have:

1. Docker installed on your system (Install Docker⁠)

2. Argos API Credentials:

   • Integration Token (available from Argos Platform)
   • Server URL (your Argos instance server url>
   • Customer ID (your organization identifier)

3. MCP-compatible AI assistant (Claude Desktop, VS Code Copilot, etc.)

⁠Installation

⁠Step 1: Configure Your AI Assistant

The MCP server supports three transport protocols. Choose the one that matches your integration needs:

⁠Option 1: Standard I/O (stdio) - Default ✅ Recommended

Best for: Claude Desktop, VS Code, and most desktop AI assistants.

Claude Desktop Configuration:

Edit or create claude_desktop_config.json:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\\Claude\\claude_desktop_config.json

{
  "mcpServers": {
    "argos-erm-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "-e", "ARGOS_INTEGRATION_TOKEN",
        "-e", "ARGOS_SERVER_URL",
        "-e", "ARGOS_CUSTOMER_ID",
        "checkpoint/argos-erm-mcp:latest"
      ],
      "env": {
        "ARGOS_INTEGRATION_TOKEN": "your_api_token_here",
        "ARGOS_SERVER_URL": "your_server_url",
        "ARGOS_CUSTOMER_ID": "your_customer_id_here"
      }
    }
  }
}

⁠Option 2: Server-Sent Events (SSE)

Best for: Web-based AI integrations or when HTTP endpoints are required.

{
  "mcpServers": {
    "argos-erm-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "-p", "8001:8001",
        "-e", "ARGOS_INTEGRATION_TOKEN",
        "-e", "ARGOS_SERVER_URL",
        "-e", "ARGOS_CUSTOMER_ID",
        "-e", "MCP_PROTOCOL",
        "-e", "MCP_HOST",
        "-e", "MCP_PORT",
        "checkpoint/argos-erm-mcp:latest"
      ],
      "env": {
        "ARGOS_INTEGRATION_TOKEN": "your_api_token_here",
        "ARGOS_SERVER_URL": "your_server_url",
        "ARGOS_CUSTOMER_ID": "your_customer_id_here",
        "MCP_PROTOCOL": "sse",
        "MCP_HOST": "0.0.0.0",
        "MCP_PORT": "8001"
      }
    }
  }
}

⁠Option 3: Streamable HTTP

Best for: Custom integrations with specific HTTP streaming requirements.

{
  "mcpServers": {
    "argos-erm-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "-p", "8002:8002",
        "-e", "ARGOS_INTEGRATION_TOKEN",
        "-e", "ARGOS_SERVER_URL",
        "-e", "ARGOS_CUSTOMER_ID",
        "-e", "MCP_PROTOCOL",
        "-e", "MCP_HOST",
        "-e", "MCP_PORT",
        "checkpoint/argos-erm-mcp:latest"
      ],
      "env": {
        "ARGOS_INTEGRATION_TOKEN": "your_api_token_here",
        "ARGOS_SERVER_URL": "your_server_url",
        "ARGOS_CUSTOMER_ID": "your_customer_id_here",
        "MCP_PROTOCOL": "streamable-http",
        "MCP_HOST": "0.0.0.0",
        "MCP_PORT": "8002"
      }
    }
  }
}

⁠Step 2: Restart Your AI Assistant

After updating the configuration file, completely restart your AI assistant application.

⁠Step 3: Verify Installation

Start a conversation with your AI assistant and test the connection:

"Can you connect to the Argos MCP server and show me what tools are available?"

Expected response: The AI should list 14 available tools for threat intelligence operations.

Test basic functionality:

"Get the last 10 alerts from Argos opened in the past 30 days"

⁠Environment Variables Reference

⁠Available Tools

Please refer to official Argos ERM MCP user guide

⁠Troubleshooting

Connection Issues:

• Verify your Argos API credentials are correct
• Ensure Docker is running: docker ps
• Check container logs: docker logs <container_id>

AI Assistant Not Detecting Server:

• Confirm configuration file path is correct
• Restart AI assistant completely (not just refresh)
• Verify JSON syntax in configuration file

Permission Errors:

• Ensure your Argos API token has appropriate permissions
• Verify Customer ID matches your Argos environment

⁠Security Notes

• No Data Storage: The MCP server acts as a gateway; no customer data is stored
• Permission Inheritance: Users only see data they have access to in Argos
• Credential Management: Never hardcode tokens in shared configurations

⁠Documentation & Support

• MCP Protocol Specification: https://modelcontextprotocol.io/⁠
• Technical Support: Contact ERM Support team: https://support.checkpoint.com/⁠

⁠License

Copyright © 2025 Check Point Software Technologies Ltd. All rights reserved.