Back to Browse

Avanan Legacy MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for the Avanan MSP SmartAPI — manage child MSPs, users, tenants, licenses, and usage.

About

MCP server for the Avanan MSP SmartAPI — manage child MSPs, users, tenants, licenses, and usage.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (2 strong, 1 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry.

4 files analyzed · No issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

file_system

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Application ID provided by Avanan Support (x-av-app-id)Optional

Environment variable: AVANAN_APP_ID

Token from the Avanan auth handshake (x-av-token)Required

Environment variable: AVANAN_TOKEN

Shared secret used to compute the x-av-sig HMACRequired

Environment variable: AVANAN_SECRET

API region: us, eu, ca, or ap (defaults to JWT region claim, then us)Optional

Environment variable: AVANAN_REGION

Transport mode: 'stdio' for local CLI use, 'http' for gateway hostingOptional

Environment variable: MCP_TRANSPORT

HTTP transport listen portOptional

Environment variable: MCP_HTTP_PORT

Log verbosity: debug, info, warn, errorOptional

Environment variable: LOG_LEVEL

Documentation

View on GitHub

From the project's GitHub README.

avanan-legacy-mcp

MCP server for the Avanan MSP SmartAPI (the "legacy" Avanan MSP tenant management API — distinct from avanan-mcp, which targets the Checkpoint Harmony Email & Collaboration HEC API).

Implements the Jan 2024 Avanan MSP SmartAPI Reference Guide:

GroupTools
Child MSPsavanan_list_msp_partners, avanan_create_msp_partner, avanan_delete_msp_partner
MSP usersavanan_list_msp_users, avanan_get_msp_user, avanan_create_msp_user, avanan_update_msp_user, avanan_delete_msp_user
Customer tenantsavanan_list_tenants, avanan_get_tenant, avanan_create_tenant, avanan_delete_tenant
Licensesavanan_list_licenses, avanan_list_addons, avanan_assign_license
Usageavanan_get_monthly_usage, avanan_get_daily_usage

Features

  • Interactive tenant card (MCP Apps, SEP-1865): avanan_get_tenant renders as an interactive card in MCP Apps hosts (Claude Desktop/web) showing domain, status, deployment mode, license package, protected users, PoC dates, and add-ons. The card is read-only, neutral by default, and brandable via window.__BRAND__ injection or MCP_BRAND_* env vars (MCP_BRAND_NAME, MCP_BRAND_LOGO_URL, MCP_BRAND_PRIMARY_COLOR, MCP_BRAND_ACCENT_COLOR, MCP_BRAND_BG, MCP_BRAND_TEXT). Plain-JSON behavior is unchanged in other hosts. Rebuild the embedded card HTML after editing ui/ with npm run build:ui.

Configuration

Env varRequiredDescription
AVANAN_APP_IDyesApplication ID provided by Avanan Support (x-av-app-id).
AVANAN_TOKENyesToken from the Avanan auth handshake (x-av-token).
AVANAN_SECRETyesShared secret used to compute the x-av-sig HMAC.
AVANAN_REGIONnous | eu | ca | ap. Defaults to JWT region claim, then us.
MCP_TRANSPORTnostdio (default) or http.
MCP_HTTP_PORTnoHTTP transport port (default 8080).
LOG_LEVELnodebug | info | warn | error (default info).

In gateway mode, credentials are taken per-request from headers: X-Avanan-App-Id, X-Avanan-Token, X-Avanan-Secret, optionally X-Avanan-Region.

Status

[!IMPORTANT] The x-av-sig signing algorithm is implemented as a best-guess HMAC-SHA256 because the MSP SmartAPI guide defers signing details to the parent Avanan API Reference Guide. Replace the body of signRequest() in src/utils/client.ts with the exact algorithm before production use. The function is isolated so no other code needs to change.

Build

npm install
npm run build
npm start

Regional endpoints

RegionBase
UShttps://smart-api-production-1-us.avanan.net
EUhttps://smart-api-production-1-eu.avanan.net
CAhttps://smart-api-production-1-ca.avanan.net
APhttps://smart-api-production-5-ap.avanan.net

All endpoints sit under /v1.0/msp/....

Reviews

No reviews yet

Be the first to review this server!