SentinelOne (Purple)

Multitenant Streamable HTTP wrapper for the SentinelOne purple-mcp server.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "sentinelone-purple": {
      "command": "npx",
      "args": [
        "-y",
        "sentinelone-purple"
      ]
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Documentation Overview

sentinelone-mcp

Multitenant Streamable HTTP wrapper for sentinel-one/purple-mcp, built so the wyre-technology MCP gateway can forward per-tenant SentinelOne credentials as HTTP headers.

Why

purple-mcp is a great first-party MCP server, but it reads its SentinelOne console token + URL from environment variables at process startup, which makes it single-tenant per container. Our gateway is multi-tenant: every request carries the calling org's credentials as HTTP headers, and the vendor container has to translate those headers into something the upstream understands.

This image bundles purple-mcp plus a small Node/Fastify proxy. The proxy:

Listens on :8080 with POST /mcp and GET /health.
Reads x-purplemcp-token and x-purplemcp-base-url from each incoming request.
Lazily spawns one purple-mcp --mode streamable-http child per (token, base-url) tenant on a private loopback port, with the right env vars set.
Proxies the request body to that child and streams the response back.
Evicts idle children after 60 minutes (IDLE_EVICT_MS).

The result is a single container that the gateway can talk to like any other vendor MCP server.

Configuration

Env var	Default	Notes
`PORT`	`8080`	Public listen port.
`PURPLE_MCP_DIR`	`/opt/purple-mcp`	Where purple-mcp source + venv live.
`PURPLE_MCP_PYTHON`	`/opt/purple-mcp/.venv/bin/python`	Python interpreter from the upstream venv.
`IDLE_EVICT_MS`	`3600000`	Idle tenant timeout (60 min). Longer keeps children warm and avoids repeated cold starts.
`SPAWN_READY_TIMEOUT_MS`	`30000`	How long to wait for a child to start serving HTTP.
`MAX_CHILDREN`	`50`	Cap on distinct concurrent tenant children. A new-tenant spawn beyond the cap is rejected (`502`) rather than evicting an existing child.
`LOG_LEVEL`	`info`	Fastify log level.

Request headers

The gateway must forward these headers on every /mcp request:

Header	SentinelOne credential
`x-purplemcp-token`	`PURPLEMCP_CONSOLE_TOKEN` (Account- or Site-level service user token)
`x-purplemcp-base-url`	`PURPLEMCP_CONSOLE_BASE_URL` (e.g. `https://yourtenant.sentinelone.net`)

Build

Terminal

docker build -t ghcr.io/wyre-ai/sentinelone-mcp:latest .

License

Apache-2.0. The bundled purple-mcp is MIT-licensed by SentinelOne.

Read the full README →View source on GitHub →

Related MCP Servers

View all in Developer Tools View all alternatives

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about SentinelOne (Purple)

Add the following block to your claude_desktop_config.json under mcpServers: "mcpServers": { "sentinelone-purple": { "command": "npx", "args": ["-y", "SentinelOne (Purple)"] } }

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

SentinelOne (Purple) AllMCPs Directory Badge

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/sentinelone-purple?style=directory)](https://allmcps.com/mcp/sentinelone-purple)

HTML Embed

<a href="https://allmcps.com/mcp/sentinelone-purple"><img src="https://allmcps.com/api/badge/sentinelone-purple?style=directory" alt="SentinelOne (Purple) on AllMCPs" /></a>

Technical Specs & Signals

CategoryDeveloper Tools

29Quality signal: Emerging · 29/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools11/30

Adoption & activity1/15

Community engagement0/10

A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

★ Featured

AllMCPs Server

The official MCP server for AllMCPs.com - submit and manage tools directly from your AI. The open directory for MCP servers. Connect Claude, Cursor, Windsurf, and AI agents to databases, tools, files, and APIs. Explore 10,000+ servers. AllMCPs is the premier, open directory for discovering, evaluating, and installing Model Context Protocol (MCP) servers to equip AI agents and LLMs with real-world superpowers.

Explore Server →

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge — proof is checked automatically, then reviewed by our team.

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 💻 Developer Tools →Best MCP servers for Developers →Alternatives to SentinelOne (Purple) →Install in Claude Desktop Install in Cursor Install in VS Code