Cisco Duo MCP

stdio

Fix Duo MFA lockouts and see every MSP subaccount at once, from your AI agent.

Getting Started

npx @getmcp/cli add io.github.Servosity/cisco-duo-mcp

Requires Pre-built binary. Community-contributed server. Review source before installing.

Claude Desktopguide →Vscodeguide →Cursorguide →Windsurfguide →

Required Environment Variables

CISCO_DUO_API_HOST
Your Duo API hostname, e.g. api-XXXXXXXX.duosecurity.com (Duo Admin Panel > Applications > your Admin API application). For an MSP, use the parent account's hostname.
CISCO_DUO_IKEY
Admin API integration key (ikey) from the same Admin API application.
CISCO_DUO_SKEY
Admin API secret key (skey). Used only to sign each request; it is never sent to Duo.

Configuration

Config file: ~/Library/Application Support/Claude/claude_desktop_config.json

JSON

{
  "mcpServers": {
    "io.github.Servosity/cisco-duo-mcp": {
      "command": "https://github.com/Servosity/msp-skills/releases/download/cisco-duo-v0.1.1/cisco-duo-mcp.mcpb",
      "env": {
        "CISCO_DUO_API_HOST": "",
        "CISCO_DUO_IKEY": "",
        "CISCO_DUO_SKEY": "",
        "CISCO_DUO_ACCOUNT_ID": "",
        "CISCO_DUO_MCP_READ_ONLY": "",
        "CISCO_DUO_BASE_URL": "",
        "CISCO_DUO_MCP_HTTP_TOKEN": "",
        "CISCO_DUO_USER_AGENT": "",
        "PRINTING_PRESS_CLIENT_PROFILE": ""
      }
    }
  }
}

Claude Desktop MCP documentation