Run your MSP tools by asking - MCP servers and Skills for the AI you already use

MSP Skills connects your PSA, RMM, backup, and more to the AI you already use - Claude, ChatGPT, Codex, Cursor, Windsurf, or any agent that runs local MCP servers. Ask a plain-English question about your stack and get a real answer back.

107 connectors are live today - including Servosity, ConnectWise PSA, HubSpot, and HaloPSA - and more PSA, RMM, backup, and M365 connectors ship every week.

Free, open source, runs on your laptop. A local SQLite mirror lets your agent answer cross-client questions the live API can't return in one shot - no rate-limit hits, no per-tech SaaS fee, and your data stays local unless you route it somewhere yourself. Built for MSP owners. No developer experience required.

New to the term? What this repo calls an MCP server is what ChatGPT calls an app or connector, Claude on the web calls a connector, Microsoft Copilot calls a connector, and Claude Code calls a Skill. Same standard underneath: the Model Context Protocol. Full plain-language answer: What is an MCP server?.

▶ Watch the full demo - every skill page has its own 30-second walkthrough (example). Demo data is simulated; every command shown exists in the real CLI.

First time here? Paste this into Claude Code

You do not need to know which command does what. Open Claude Code and paste:

Set up msp-skills for me from https://github.com/servosity/msp-skills. Read the repo's README, install the connectors that fit my stack, and walk me through anything only I can do (like approving a browser extension or signing in to a vendor portal).

Two notes that save the most time, on Windows and macOS alike:

• Adding the marketplace by its full HTTPS URL avoids an SSH key a fresh machine does not have:

  /plugin marketplace add https://github.com/servosity/msp-skills.git
  /plugin install connect-tool@msp-skills
  

  The .git suffix matters.
• Windows works. Claude Code runs natively on Windows, and Git for Windows is optional. If you do not have Git, connect-tool installs without it:

  irm https://raw.githubusercontent.com/servosity/msp-skills/main/skills/connect-tool/bootstrap.ps1 | iex
  

Stuck on credentials? That is what connect-tool is for: it drives the Chrome you are already logged into, puts the API key straight into Windows Credential Manager or the macOS Keychain, and refuses to say "connected" until a real authenticated call returns your live data.

What's in the box

⭐ First-party, by Servosity: the domain-cert-tracker connector and the servosity backup & DR connector + the guided concierge and the connect-tool.

Skill	System	Status	Install
⭐ msp-skills-concierge	Connector recommendations + guided install for the msp-skills catalog		Marketplace
abnormal	cloud email security platform that detects and remediates phishing, business email compromise, account takeover, and vendor email compromise		Install
acronis	Acronis Cyber Protect Cloud		Install
action1	Patch management and vulnerability remediation across managed endpoints in every client organization		Install
afi	SaaS backup for Microsoft 365 and Google Workspace		Install
appdirect	AppDirect cloud commerce marketplace		Install
apple-business	Apple Business (Apple Business Manager): devices, MDM server assignments, AppleCare coverage, Activation Lock, users and audit events across every client org		Install
atera	all-in-one RMM, PSA, and remote-access platform for MSPs and internal IT teams		Install
autotask	Autotask PSA		Install
auvik	Network monitoring: sites, devices, interfaces, and alerts across client networks for MSPs		Install
avanan	Avanan (Check Point Harmony Email and Collaboration) email and SaaS collaboration security across every managed tenant		Install
aws-billing	AWS billing & Cost Explorer - plain-English bill breakdowns and waste flags		Install
axcient	Axcient x360Recover BCDR: fleet backup health, restore-point and RPO checks, AutoVerify boot-proof evidence, and per-client usage from a local mirror		Install
backup-radar	Backup Radar (ScalePad) backup monitoring: v3 client health, devices, ingest and retire plus the read-only v2 backups, results, inactive and retired APIs, mirrored into a local store		Install
betterstack	Better Stack Uptime monitoring, incident management, on-call scheduling, and status pages		Install
bitdefender	Bitdefender GravityZone (cloud or on-premises Control Center)		Install
blackpoint	Blackpoint Cyber CompassOne MDR: tenants, detections, assets, vulnerabilities, posture and Cloud Response, plus a cross-tenant fleet view		Install
blumira	cloud SIEM and automated detection and response platform		Install
cipp	the CyberDrain Improved Partner Portal (CIPP), the open-source Microsoft 365 multi-tenant management platform for MSPs - Entra ID, Intune, Exchange Online, Defender and GDAP		Install
cisco-duo	Cisco Duo multi-factor authentication: users, phones, bypass codes, authentication logs, and MSP subaccounts through the Duo Admin API		Install
cisco-meraki	Cisco Meraki Dashboard cloud-managed networking (MX security appliances, MS switches, MR access points, MV cameras) across every client organization		Install
cisco-umbrella	Cisco Umbrella DNS-layer security: destination lists, policies, deployments, reports, Investigate and MSP child orgs through the Umbrella v2 API		Install
cloudally	CloudAlly SaaS backup for Microsoft 365 and Google Workspace: partner, reseller and customer accounts, backup tasks and their status, users, billing and recovery jobs through the Management API v2		Install
comet-backup	White-label backup: users, devices, jobs, policies, and storage across every tenant on an MSP's Comet server		Install
⭐ connect-tool	Authentication setup for any CLI, MCP server, or Skill, driven through your own logged-in Chrome. Windows and macOS		Marketplace
connectsecure	ConnectSecure (formerly CyberCNS) vulnerability, asset and compliance management platform for MSPs		Install
connectwise-automate	ConnectWise Automate (LabTech) RMM: device management, patching, scripting, monitors and alerts for MSPs		Install
connectwise-control	ConnectWise Control (ScreenConnect): remote support and access session management for MSPs		Install
connectwise-manage	ConnectWise PSA (Manage)		Install
connectwise-rmm	ConnectWise RMM (Asio) remote monitoring and management platform		Install
cork	Cork Vantage cyber risk, compliance, vulnerability, and cyber warranty platform		Install
cove	N-able Cove Data Protection cloud backup and recovery		Install
crowdstrike	CrowdStrike Falcon EDR: alerts, devices, Spotlight vulnerabilities, prevention policies, and MSSP Flight Control across every tenant		Install
datagate	telecom billing platform: customers, agreements, invoices, and other resource lookups from a local mirror		Install
datto-bcdr	Datto BCDR: appliances, agents, screenshot-verification audits, stale-backup roll-ups, recoverability KPI, and cross-client alert triage from a local mirror		Install
datto-rmm	Datto RMM: devices, alerts, patch and AV gaps, warranty, agent drift, and fleet QBR scorecards from a local mirror		Install
datto-saas	Datto SaaS Protection (Backupify): seat audits, protection gaps, backup health ranking, exit inventories and plan-first bulk seat changes across every client from a local mirror		Install
dnsfilter	DNSFilter DNS security and content filtering (MSP and client organizations)		Install
⭐ domain-cert-tracker	Domain and TLS estate per client: registrations, expiries, registrar locks, DNS drift and certificates, from public RDAP, CT logs, DNS and TLS		Install
domotz	Domotz network monitoring and device discovery platform		Install
dropsuite	Dropsuite (NinjaOne SaaS Backup): fleet backup health, coverage gaps, seat and billing reconciliation, restore-test evidence across every client organization		Install
eset-protect	ESET PROTECT cloud console via the ESET Connect API		Install
exchange-online	Exchange Online, the Microsoft 365 mail service: mailboxes, permissions, forwarding, mail flow and quarantine across customer tenants		Install
fortinet	FortiGate firewalls (FortiOS REST API), FortiManager and FortiGate Cloud		Install
google-workspace	Google Workspace Admin (Directory, Reports, Reseller, Licensing, and Data Transfer APIs) across every client domain		Install
grab-cookie	Session-credential capture for sites with no API key or OAuth path: httpOnly cookies and opaque bearer tokens. Windows verified, macOS untested		Marketplace
gradient	the Gradient MSP Synthesize billing-reconciliation vendor API		Install
halopsa	HaloPSA, HaloITSM, HaloCRM		Install
hubspot	HubSpot CRM: contacts, companies, deals, tickets, engagements		Install
hudu	IT documentation and knowledge-base platform for MSPs		Install
huntress	managed endpoint detection and response (EDR) security platform		Install
immybot	ImmyBot software deployment and desired-state automation: computers, deployments, maintenance sessions, and cross-tenant software inventory		Install
itglue	IT Glue documentation platform		Install
jamf-pro	Jamf Pro: computers, mobile devices, policies, scripts, and packages across every client Jamf instance for MSPs		Install
jira-service-management	Jira Service Management Cloud: requests, queues, SLAs, customers, organizations, Assets (CMDB)		Install
kaseya-bms	Kaseya BMS PSA - tickets, CRM, contracts, finance, and projects		Install
kaseya-vsa	Kaseya VSA 10 RMM - devices, patches, software inventory, scripts, tasks, and alerts		Install
keeper	Password manager administration for MSPs: managed companies, users, 2FA and admin posture, and licences across every client		Install
knowbe4	KnowBe4 KMSAT security awareness training and phishing-simulation reporting		Install
levelio	Level RMM and endpoint monitoring platform		Install
liongard	Liongard automated documentation and configuration change-detection platform for MSPs		Install
maxio	Maxio Advanced Billing - subscription revenue, MRR, and retention intelligence		Install
microsoft-graph	Microsoft 365 / Entra tenant administration via Microsoft Graph		Install
mimecast	Mimecast email security (API 2.0)		Install
mspbots	MSPbots BI: datasets, KPI snapshots, ticket analytics, exports		Install
n-central	N-able N-central RMM: devices, org tree, issue triage, cross-tenant search		Install
nerdio	Nerdio Manager for MSP: Azure Virtual Desktop fleets, host pools, autoscale, desktop images, Intune devices, and cross-account billing		Install
netsapiens	White-label VoIP platform (Crexendo, OITVOIP and others): domains, users, devices, phone numbers and call records across every client domain		Install
ninjaone	NinjaOne RMM: devices, patch compliance, backup gaps, AV blast-radius, health, drift		Install
pagerduty	PagerDuty incident response and on-call management platform		Install
pandadoc	PandaDoc proposal, quote, and e-signature document automation		Install
pax8	Pax8 cloud marketplace billing, subscriptions, reconciliation, MRR, and usage overages		Install
pipedrive	Pipedrive CRM: deals, pipelines, persons, organizations, activities		Install
proofpoint	Proofpoint Targeted Attack Protection (TAP) email security and threat intelligence		Install
proxmox	Proxmox Virtual Environment (PVE) hypervisor clusters and Proxmox Backup Server (PBS)		Install
prtg	PRTG Network Monitor (API v2): sensors, devices, groups, probes, alarms, channels and fleet views across every client's PRTG core		Install
quickbooks	QuickBooks Online accounting: invoices, bills, payments, customers, vendors, AR/AP aging, DSO, cash forecast		Install
quotewerks	QuoteWerks Web quoting: quotes, orders, invoices, line items, products, repricing		Install
resourceguru	Resource Guru - resource scheduling, bookings, and per-day utilization		Install
rewst	Rewst RPA/workflow automation for MSPs: orchestrations, triggers, organizations and integration packs over a GraphQL API		Install
riverside-fm	Riverside.fm - export transcripts, audio, and video from your recording studio		Install
rocketcyber	RocketCyber managed SOC: incidents, agents, detection events, Defender and Microsoft 365 posture, and suppression rules		Install
rootly	Rootly incident management, alerting, and on-call response platform		Install
runzero	runZero		Install
saas-alerts	SaaS Alerts SaaS security monitoring: alerts, Respond rule triggers and automated response, webhooks, and customer coverage across every Microsoft 365 and Google Workspace tenant		Install
salesbuildr	Salesbuildr MSP quoting and CPQ: quotes, opportunities, products, companies, pricing books		Install
sentinelone	SentinelOne Singularity: threat triage, mitigation, agent fleet health, and protection-coverage gaps across customer sites		Install
⭐ servosity	Servosity backup and DR: fleet attention, stale backups, QBR reports, restores, billing		Install
sherweb	Sherweb cloud marketplace billing, subscriptions, customers, and margin across Microsoft CSP and cloud services		Install
skykick	SkyKick Cloud Backup - Microsoft 365 Exchange and SharePoint backup assurance across every customer tenant		Install
sonicwall	SonicWall firewalls via Network Security Manager (NSM SaaS) and MySonicWall		Install
sophos-central	Sophos Central endpoint protection across every partner tenant: alerts, endpoints, isolation, tamper protection, account health, licences, billing and SIEM		Install
superops	SuperOps PSA+RMM: tickets, SLAs, assets, alerts, clients, contracts, invoices, worklogs		Install
syncro	Syncro PSA and RMM: tickets, invoicing, estimates, contracts, RMM alerts, and asset patch reporting for MSPs		Install
synology	Synology DSM NAS units and Active Backup for Business (ABB): backup tasks, job results, storage pools, volumes and disk SMART health		Install
tactical-rmm	Self-hosted Tactical RMM: agent triage, patch posture, fleet-wide queries, and cohort script execution		Install
td-synnex	TD SYNNEX StreamOne ION cloud marketplace: customers, subscriptions, orders, renewals and per-customer margin		Install
threatdown	ThreatDown OneView: endpoint protection, detections, isolation and response jobs across every managed customer site		Install
threatlocker	ThreatLocker Portal: approvals, audit log, device health, and policy across customer tenants		Install
threecx	3CX Phone System (cloud or on-premises PBX)		Install
unifi-network	self-hosted UniFi Network controller managing devices, clients, firewall policies, ACLs, VLANs, VPN, and switching on a local gateway		Install
veeam	Veeam Service Provider Console (VSPC): multi-tenant backup monitoring, alarms, licensing and reseller management for MSPs		Install
vsphere	VMware vCenter Server and vSphere (ESXi hosts, clusters, VMs, datastores and snapshots)		Install
warranty	Dell, Lenovo and Apple device warranty lookups		Install
watchguard	WatchGuard Cloud: Firebox, Endpoint Security (EPDR), ThreatSync, AuthPoint and NDR across every Service Provider managed account		Install
windows-server	Windows Server 2016 to 2025 health, inventory and safe service actions over WinRM		Install
wordpress	Publish and manage WordPress pages, posts, and media		Install
xero	the Xero cloud accounting platform		Install
zammad	Zammad helpdesk and ticketing system (self-hosted or hosted)		Install
zoom-phone	cloud phone system for business: users, numbers, call queues, auto receptionists, desk phones and E911		Install

About the badges. Live-verified (green) means a real MSP confirmed this skill against a live production tenant - the badge carries the date and source. Awaiting live verification (amber) means it passes every mechanical gate (build, command-surface-vs-docs claims check, install dry-run) but no one has reported a live run yet - be the first: run it against your tenant and report that it works.

🛠 Built live with MSPs. Join a free weekly Build Session at compoundingteams.com/build-sessions to watch a Skill built against a real MSP system - or bring your own.

Install in 60 seconds

Path A - paste one prompt into your AI agent (recommended)

Not sure which connector to pick? Let your agent decide. Paste this into Claude Code, Codex CLI, or Claude Cowork:

Read https://github.com/Servosity/msp-skills and, using everything you know about me and how my MSP works, recommend which connectors I should install - then install the ones I approve.

Prefer a guided version? The concierge does the same from inside Claude Code: /plugin marketplace add Servosity/msp-skills, then /plugin install msp-skills-concierge@msp-skills.

Or install a specific connector. The Servosity prompt:

Install the Servosity Skill and MCP server from Servosity/msp-skills in this agent workspace. If this workspace uses a POSIX shell (macOS, Linux, WSL, or Bash), run bash <(curl -fsSL https://raw.githubusercontent.com/Servosity/msp-skills/main/skills/servosity/install.sh). If it uses Windows PowerShell, run iwr -useb https://raw.githubusercontent.com/Servosity/msp-skills/main/skills/servosity/install.ps1 | iex. Then authenticate with SERVOSITY_MSP_TOKEN=<your-partner-token> servosity-cli doctor and run servosity-cli --help to explore.

And the ConnectWise PSA (Manage) prompt:

Install the ConnectWise PSA (Manage) Skill and MCP server from Servosity/msp-skills in this agent workspace. If this workspace uses a POSIX shell (macOS, Linux, WSL, or Bash), run bash <(curl -fsSL https://raw.githubusercontent.com/Servosity/msp-skills/main/skills/connectwise-manage/install.sh). If it uses Windows PowerShell, run iwr -useb https://raw.githubusercontent.com/Servosity/msp-skills/main/skills/connectwise-manage/install.ps1 | iex. Then authenticate per the README and run connectwise-manage-cli --help to explore.

The same prompt works for every connector in the table above - swap the skill name and slug. If your agent can't run shell, use Path B below.

Path B - run the installer yourself

On macOS / Linux (swap the slug for any connector in the table above):

bash <(curl -fsSL https://raw.githubusercontent.com/servosity/msp-skills/main/skills/servosity/install.sh)

On Windows (PowerShell):

iwr -useb https://raw.githubusercontent.com/servosity/msp-skills/main/skills/servosity/install.ps1 | iex

Each installer drops both the CLI and the MCP server, so you can use the Skill (Claude Code / Codex) and the MCP server (Claude Desktop / ChatGPT / Cursor / etc.) from one install. For Claude Desktop, ChatGPT, Cursor, Windsurf, Cline, Continue, Gemini, or Copilot wire-up, see docs/which-agent.md and each skill's mcp-install.md.

Now what? Once your connector's --version (or doctor) returns clean, you're 60 seconds from your first real query. Bring your tenant + your hardest cross-client question to a free Build Session - we'll work it live with the MSP cohort and the same Skills you just installed.

What your agent can do

Outcomes, not hype - drawn from each of the 107 connectors' skill pages:

Outcome	Skill	Command
What new, unremediated email threats need attention right now?	abnormal	abnormal-cli triage --since 24h --top 20
Whose backups succeeded, failed, or went stale across every customer last night?	acronis	acronis-cli health
Which endpoints across all clients are missing the most patches?	action1	action1-cli fleet patch-posture
Which resources have no backup protection at all?	afi	afi-cli coverage-gaps --agent
Which payments failed or stalled in the last week, across every company?	appdirect	appdirect-cli payments unpaid --since 7d --json
Which devices are not assigned to any MDM server, and is a missing default server the reason?	apple-business	apple-business-cli devices unassigned --added-within 30d --agent
Which agents have gone offline or stopped checking in?	atera	atera-cli agents stale --days 30
Which approved time entries haven't been invoiced yet?	autotask	autotask-cli unbilled
What hardware is past or approaching end-of-support across every client?	auvik	auvik-cli eol --bucket expired
What did Avanan catch across my tenants since the start of my shift?	avanan	avanan-cli triage --since 24h
Why did my bill change month-over-month?	aws-billing	aws-billing-cli compare --from last-month --to this-month
Whose backups failed or went stale across every client last night?	axcient	axcient-cli health
Which backups are failing or silent today, new or ongoing, and how many tickets are open on each?	backup-radar	backup-radar-cli check --agent
What's down right now and is anyone actually paged?	betterstack	betterstack-cli down
Which customers have unmanaged, outdated or unscanned endpoints?	bitdefender	bitdefender-cli fleet health
Which open detections are oldest across every client?	blackpoint	blackpoint-cli triage --older-than 24h
What are the worst open findings across all my client accounts right now?	blumira	blumira-cli triage --status open
Which tenants have users with no MFA registered, as one row per tenant?	cipp	cipp-cli posture --dimension mfa
Why can't this user get through Duo, and which fix applies?	cisco-duo	cisco-duo-cli lockout triage "jane@example.com" --account-id "Acme Corp"
Which client org is in the worst shape right now?	cisco-meraki	cisco-meraki-cli fleet health --agent
Which customers have roaming computers off, uninstalled, stale or without web protection, and how many seats each?	cisco-umbrella	cisco-umbrella-cli fleet health --stale-days 7 --agent
Which mailboxes across all my CloudAlly customers have not backed up in two days, or failed? (It reads the synced feed: run cloudally-cli sync --resources distributor_accounts-backup-statuses first.)	cloudally	cloudally-cli backup health --stale-days 2 --group-by account
Which protected items failed, are overdue or never backed up, across every tenant?	comet-backup	comet-backup-cli health --state failed,overdue,never --json
Which open vulnerabilities across every client are most likely to be exploited?	connectsecure	connectsecure-cli exposure --min-epss 0.5 --severity Critical,High
Which agents haven't checked in for 30+ days, by client?	connectwise-automate	connectwise-automate-cli stale-agents --days 30 --agent
Which access sessions are in this group?	connectwise-control	connectwise-control-cli sessions list --session-type Access --group "All Machines" --agent
Which tickets did we touch this week that have zero time logged against them?	connectwise-manage	connectwise-manage-cli unbilled --since 7d
Which endpoints are offline or silent for more than a day, by client?	connectwise-rmm	connectwise-rmm-cli fleet stale --older-than 24h --agent
Why did this client's risk score move, and which component drove it?	cork	cork-cli score attribute <client-uuid> --since 30d
Which devices failed their last backup since yesterday?	cove	cove-cli devices failures --since 24h --json
What should I triage first across all my client tenants right now?	crowdstrike	crowdstrike-cli fleet alerts --status new
Pull this month's invoices	datagate	datagate-cli invoices --period-start 2026-08-01T00:00:00Z --period-end 2026-08-31T23:59:59Z --json
Which protected machines failed their last backup screenshot verification?	datto-bcdr	datto-bcdr-cli screenshots --failed --stale-days 7 --agent
Which devices haven't checked in for 30 days, across every client?	datto-rmm	datto-rmm-cli fleet stale --days 30 --agent
Which seats across every client are unprotected, newest first?	datto-saas	datto-saas-cli seats gaps --since 30d --agent
Why is this domain blocked for this client, and which policy and rule did it?	dnsfilter	dnsfilter-cli why-blocked "example.com" --org "Acme Dental"
What expires within 30 days, lost its lock or changed, per client?	domain-cert-tracker	domain-cert-tracker-cli report --days 30 --agent
Is anything on fire across all my sites?	domotz	domotz-cli fleet health --agent
What is failing, stuck or stale across every client right now?	dropsuite	dropsuite-cli health --stale-after 48h --failing --agent
Which customers have devices that need attention, are muted or stopped checking in?	eset-protect	eset-protect-cli fleet health
Can mail auto-forward out of this tenant, and does the outbound spam policy or a remote domain block it?	exchange-online	exchange-online-cli forwarding-audit 0550b473-9fd2-4dbb-a058-a1640b4bf458 --sweep --agent
Give me one posture verdict across every client FortiGate, showing only findings that are new since the last run.	fortinet	fortinet-cli fleet audit --new
Which accounts across all my clients lack 2-Step Verification, with unenrolled admins first?	google-workspace	google-workspace-cli mfa-gaps --all-tenants --agent
Push a whole file of usage counts and rebuild billing exactly once?	gradient	gradient-cli usage push --file ./counts.csv --agent
What's about to breach SLA in the next 24 hours?	halopsa	halopsa-cli sla breaching --within 24h --team Support --json
Which open deals have gone cold with no engagement in the last three weeks?	hubspot	hubspot-cli stale deals --days 21 --owner me
Which clients have the worst documentation completeness?	hudu	hudu-cli audit completeness --agent
Which incidents are oldest across every client org?	huntress	huntress-cli fleet-incidents --sort age
What failed in last night's maintenance window, by root cause?	immybot	immybot-cli session-triage --since 24h
Which client owns this device, serial number, or contact?	itglue	itglue-cli search "Fortinet"
Which client has this Mac, iPad or iPhone, by serial, name, username or email?	jamf-pro	jamf-pro-cli fleet find C02XK1ABJG5H --agent
Which tickets breach SLA in the next two hours, across every queue?	jira-service-management	jira-service-management-cli breaches --within 2h
Which queues are underwater and what's going stale before standup?	kaseya-bms	kaseya-bms-cli queue-health --agent
Which pending OS updates are exposed on the most devices, across every client?	kaseya-vsa	kaseya-vsa-cli patch-exposure --by kb --severity critical,important --agent
How is every client doing on 2FA, weak passwords and BreachWatch?	keeper	keeper-cli posture report --days 90 --agent
Who clicked the bait in more than one phishing test?	knowbe4	knowbe4-cli repeat-clickers --min-clicks 2 --since 90d
Which devices are most at risk across alerts, patches, score, and staleness?	levelio	levelio-cli at-risk --top 20
What changed across all my clients in the last 24 hours?	liongard	liongard-cli drift --since 24h
What's our current MRR and ARR right now?	maxio	maxio-cli mrr now
Which SKUs are we paying for but not fully using, ranked by wasted seats?	microsoft-graph	microsoft-graph-cli licenses waste --agent
Why didn't this message arrive: held, rejected, released or delivered, and by which policy?	mimecast	mimecast-cli why --from billing@vendor.example --to alice@example.com --since 3d --agent
Is our open-ticket backlog up or down versus last week?	mspbots	mspbots-cli trend open_tickets --agg count
What's red right now, grouped by customer and ranked by severity?	n-central	n-central-cli triage --by customer
Which host pools have autoscale off or drifting across every customer?	nerdio	nerdio-cli fleet autoscale-audit
Which clients are over or near a user, call queue, auto attendant or conference limit?	netsapiens	netsapiens-cli fleet seats --flagged --json
Which organizations are below 95% patch compliance?	ninjaone	ninjaone-cli patch-compliance --min-pct 95
What's on fire right now, ranked by SLA risk?	pagerduty	pagerduty-cli pulse
Which documents were sent but never completed?	pandadoc	pandadoc-cli stalled --days 14
Where is my billing leaking - invoiced for a cancelled product, or active but never billed?	pax8	pax8-cli reconcile
Which open deals has nobody touched in two weeks, worst dollar value first?	pipedrive	pipedrive-cli stale --quiet-days 14 --agent
What malicious clicks and messages got through overnight?	proofpoint	proofpoint-cli backfill --since 12h
Which client VMs lack a good, recent backup (verified, where it is on PBS)?	proxmox	proxmox-cli posture --only problems --agent
Which client core is in the worst shape right now?	prtg	prtg-cli fleet status --agent
Who owes us money, bucketed 0-30 / 31-60 / 61-90 / 90+?	quickbooks	quickbooks-cli ar-aging --agent
Where does the Acme quote stand?	quotewerks	quotewerks-cli docs search --customer "Acme" --type QUOTE
Who is overbooked across the whole fleet this month?	resourceguru	resourceguru-cli overbooked --start 2026-06-01 --end 2026-06-30 --agent
Is automation healthy for this client right now?	rewst	rewst-cli health --org <orgId> --since 24h --agent
Back up everything in a studio to disk?	riverside-fm	riverside-fm-cli bulk export --studio my-studio --out ./archive
What broke across all my clients overnight?	rocketcyber	rocketcyber-cli triage --since 24h
Who's on call right now across every service and schedule?	rootly	rootly-cli oncall-now
Which of our assets are most exposed right now?	runzero	runzero-cli triage --agent
What fired across every customer in the last 24 hours, critical first?	saas-alerts	saas-alerts-cli triage --since 24h --min-severity medium
Which sent or approved quotes are aging, and how much is at risk?	salesbuildr	salesbuildr-cli quote stale --days 14
What should I triage first across all my client sites right now?	sentinelone	sentinelone-cli threats triage
Where is my attention needed today, ranked worst-first?	servosity	servosity-cli attention --top 5
What is my net margin per customer this month - receivable minus payable?	sherweb	sherweb-cli margin --month 2026-04
Which customers have a protection gap right now?	skykick	skykick-cli fleet-health --flag-gaps --agent
Give me one insurance-posture row per client firewall: firmware, end of support, advisories, licences, admin TOTP and SSL-VPN exposure.	sonicwall	sonicwall-cli posture
What needs attention across all my customers today?	sophos-central	sophos-central-cli fleet triage
Who's about to breach SLA, grouped by technician?	superops	superops-cli sla-watch --by tech --window 4h
Which customers have logged time we never invoiced?	syncro	syncro-cli billing uninvoiced
Is every client NAS OK? One row per NAS with backup outcomes, stale devices, worst storage state and sync age.	synology	synology-cli fleet status
What's the overall health of my fleet right now?	tactical-rmm	tactical-rmm-cli fleet health
Which subscriptions renew in the next 30 days with auto-renew switched off?	td-synnex	td-synnex-cli subscriptions renewals --within 30d --auto-renew off
Which endpoints haven't checked in for 24 hours, across every site?	threatdown	threatdown-cli fleet stale --hours 24 --agent
What application approvals are pending across all my clients right now?	threatlocker	threatlocker-cli approvals triage --all-tenants
Which client phone systems are failing or warning, and why?	threecx	threecx-cli fleet health --agent
What changed in this site's config since my last check?	unifi-network	unifi-network-cli drift --site default --json
Which backup jobs are failing across all my customers?	veeam	veeam-cli fleet-health --agent
Which VMs are blocked from migrating, and what is blocking each one?	vsphere	vsphere-cli migration blockers --severity block --agent
Which client devices are out of warranty or expire in the next 90 days?	warranty	warranty-cli report --within 90d --agent
Which customer needs attention first across Firebox, endpoints, ThreatSync and licenses?	watchguard	watchguard-cli accounts health --agent
Which of my servers need attention today, and why?	windows-server	windows-server-cli health --agent
Publish a landing page from HTML without opening wp-admin?	wordpress	wordpress-cli pages create --title "Spring Promo" --content "<h1>Spring Promo</h1>" --status publish
Who owes us, and how overdue is each invoice?	xero	xero-cli aging --agent
Who on the team is overloaded, and who is idle?	zammad	zammad-cli agent-load --json
Which users, common areas and sites have a missing or unverified emergency address?	zoom-phone	zoom-phone-cli e911 audit --json --select findings.kind,findings.name,findings.detail

Cross-skill questions compose too: find every ticket about backup failures across all clients by combining halopsa-cli tickets search with servosity-cli stale-backups.

Works with your agent

The five agents MSP owners actually use:

Your AI agent	Why MSPs use it	How to install MSP Skills
Claude Desktop (Mac/Windows app)	The most common MSP-owner choice - no terminal, just a chat window	Run installer, then Settings > Extensions to register the MCP server
ChatGPT (desktop app)	The brand most MSPs already pay for	Run installer, then add the MCP server in Settings > MCP servers as a local (STDIO) server. ChatGPT on the web is not supported yet
Claude Code (CLI)	For the technical-leaning MSP owner or your senior tech	Paste the install prompt above
Codex CLI (OpenAI)	OpenAI's terminal agent for the same audience	Paste the install prompt above
Claude Cowork (Anthropic, GA Mar 2026)	Desktop agent that runs shell on your behalf	Paste the install prompt above

Also works with Cursor, Windsurf, Cline, Continue.dev, Zed, GitHub Copilot, and Gemini CLI. MSP Skills speaks the open MCP standard, so any current or future agent that runs local (STDIO) MCP servers can use it. Full per-tool deep-dive: docs/which-agent.md.

Run more than one agent? Install MSP Skills across all 51+ supported agents at once: npx skills add Servosity/msp-skills@latest (requires Node.js, then run the per-skill installer for the CLI/MCP binaries). Details in docs/which-agent.md.

What makes this different

Local mirror, not live calls

Most AI tools and MCP servers for PSAs and backup systems call the vendor's API on every question your agent asks. That works fine for "show me ticket #4421." It falls over at QBR time, when you're asking "how many backup-failure tickets across all 47 clients last quarter, grouped by engine?" - that's 47 paginated REST calls, rate-limit headaches, and a context window full of raw JSON the model has to re-read.

MSP Skills syncs each connected system into a local SQLite mirror with full-text search. Cross-client and cross-engine questions become one local query: instant, offline, and the AI sees the answer, not the raw data.

Works with the AI you already use

You don't have to switch agents to use MSP Skills. Same package, two interfaces: a Claude Code / Codex Skill for shell-style agents, and an MCP server for Claude Desktop, ChatGPT, Cursor, Windsurf, Cline, Continue.dev, Gemini, and Copilot. One install drops both binaries on your machine. Use one or both - your call. No vendor lock-in, no proprietary plugin format, no SaaS subscription that ties you to a single AI.

MSP owner first, not developer first

You don't have to know JSON, regex, or what "stdio transport" means. Paste one sentence into Claude Code or Codex and your agent reads the Skill, installs the binary, and walks you through authentication. Every command has a tier (read / write / destructive) and a recommended agent policy in each skill's governance.md - reads are always safe, and the recommended agent rule is to preview writes with --dry-run and require your approval before any mutation. The hard stuff is hidden; the safety bar is high.

Safety model

These skills hold privileged, multi-tenant access to systems that run MSP businesses, so safety is a first-class concern, not a footnote:

• You supply your own credentials at runtime. Nothing is stored in this repo.
• Every skill ships a permission matrix. Each skill's governance.md tags commands read / write / destructive and tells you how to scope an agent. The safe default for an autonomous agent is read plus previewed writes (--dry-run first, human approval before the real thing); gate destructive and credential-touching operations behind a human.

Frequently asked questions

Does this work with ChatGPT?

In the ChatGPT desktop app, yes. It runs MCP servers locally (STDIO), which is how MSP Skills runs, and shares MCP configuration with Codex on the same machine (OpenAI). Add a connector under Settings > MCP servers as a STDIO server whose command is its MCP binary (for example halopsa-mcp), or add it once to Codex's ~/.codex/config.toml. We ran our live-verified Zammad connector in local mode through the Codex engine built into the desktop app: all 38 tools loaded and a read-only query came back.

ChatGPT on the web is not supported today. It needs a remote (HTTP) server, and SECURITY.md says not to run a connector in HTTP mode until it is reprinted. If your team works there, a hosted gateway or your vendor's own hosted server is the better pick. Step-by-step: ChatGPT setup.

Does this work with Claude?

Yes - Claude Code and Claude Desktop. Claude.ai on the web is not supported yet: it needs a remote (HTTP) server, which SECURITY.md pauses. Claude Code reads the Skill directly. For Claude Desktop, run the installer, then go to Settings > Extensions to register the MCP server - the panel walks you through it without editing JSON. (Power users can still hand-edit claude_desktop_config.json via Settings > Developer > Edit Config if you prefer.) Both paths are first-class.

Is my PSA, CRM, or backup data safe? Does it leave my network?

Your data stays on your machine. MSP Skills runs locally: the CLI and the MCP server are binaries on your laptop. The SQLite mirror sits in a local directory under your user account. The AI agent (Claude, ChatGPT, Codex) only sees what the CLI or MCP server returns - typically the result of a query, not raw bulk data. Credentials are read from your environment or your agent's config; they're never bundled into this repo or transmitted to MSP Skills servers (there are none). The only paths that move data anywhere else are ones you switch on and point at a URL of your own: --deliver webhook:<url>, a feedback endpoint you set, and the --transport http MCP listener on the connectors that have it.

More questions - Codex/Cursor/Copilot support, coding skill needed, rate limits, vendor AI overlap, Windows, cost, trying one client first, non-MCP agents

Does this work with Codex, Cursor, Windsurf, Cline, GitHub Copilot, or Gemini CLI?

Yes - all of them. Each speaks MCP (some natively, some via an extension or marketplace). The cross-tool table at the top of this README links each one's install path. The pattern is the same: install the MSP Skills binary, point your AI tool at it, authenticate. Tool-specific gotchas (Copilot uses servers in mcp.json not mcpServers, Cline needs an npx workaround on Windows, etc.) are documented in docs/which-agent.md. Web-only apps (ChatGPT on the web, Microsoft 365 Copilot, the Gemini app) need a remote server, which MSP Skills does not support yet.

Do I need to know how to code?

No. The recommended install path is to paste one sentence into Claude Code or Codex - your agent reads SKILL.md and does the install. The fallback is a one-line installer per OS (bash or PowerShell). Neither path requires writing code, editing JSON in a text editor, or installing Node, Python, Docker, or a database. You will need to enter API credentials your PSA or backup tool gives you.

Will this hit my vendor's API rate limits?

Almost never. Each connector syncs your data into a local SQLite mirror once, then incrementally; subsequent questions (triage, SLA breaches, client cards, cross-client analytics) run against the local mirror, not the live API. The big-batch QBR queries that get you 429'd with API-passthrough tools become a single SQL join here.

How is this different from my vendor's built-in AI?

Vendor-native AI is great for ticket-by-ticket work - rewriting replies, summarizing one ticket, classifying sentiment. MSP Skills is the MSP-owner-on-the-couch-with-Claude layer: cross-client analytics, ad-hoc questions across thousands of tickets, multi-system queries that join your PSA with your backup tool. The two complement each other; you don't have to choose.

Can I run this on Windows?

Yes. The PowerShell installer in "Install in 60 seconds" above is the same install path as macOS / Linux, just packaged for PowerShell. The CLI and MCP binaries are native Windows builds. Cline users on Windows may need a small npx workaround documented in docs/which-agent.md.

What does it cost?

The Skills, the CLI binaries, and the MCP servers are free. Apache-2.0 licensed - free to use commercially, free to fork. Servosity does not charge for API access required to run the Servosity skill. Other PSA, RMM, and backup vendors set their own API-access terms. You pay only for whichever AI agent you use (Claude, ChatGPT, Codex, etc.), and those are billed by your AI provider, not by us.

Can I try it on one client first?

Yes. Every command takes a client / company filter (e.g. halopsa-cli client card "Acme Corp", servosity-cli company show 4421). Read-tier commands change nothing; you can try them against your live system safely. For writes, each skill's governance.md tags every command with a recommended agent policy - preview with --dry-run and approve before the real thing. The safe starting move is a read-only triage against one client, see the output, then widen scope.

What if my AI doesn't speak MCP?

If your AI doesn't yet support MCP and isn't Claude Code / Codex CLI (which read SKILL.md directly), MSP Skills won't fit yet. Every connector's CLI binary still works standalone in a shell - you can pipe its output into anything. As more AI tools add MCP (the protocol is moving fast in 2026), they'll work with MSP Skills automatically without anything changing on our side.

Built and tested live with MSPs

These skills are built and tested with real MSPs running them against their own production systems, live, in our free weekly Build Sessions (Thursdays). An MSP brings a system we have not covered - your PSA, RMM, backup product, or security tool - and we co-build the Claude Code Skill and MCP server live. You watch, you ask, you walk away with a working integration, and every shipped Skill lands here the day it merges.

RSVP for the next one at compoundingteams.com/build-sessions.

Roadmap

We co-build the next skills live with MSPs in the weekly Build Session. The targets the MSP community asks for most, in demand order:

• NinjaOne fleet hygiene (the fastest-growing RMM; silent-failure detector)
• Autotask PSA (ConnectWise PSA and HaloPSA shipped - Autotask completes the big three)
• IT Glue / Hudu (RMM ticket-to-doc: resolution to documentation)
• M365 governance / Copilot data-exposure pre-check
• Datto RMM, Kaseya VSA, Atera, Syncro

Want one of these next? Bring the system to a Build Session (above) or open an issue.

Don't see the system you need?

Easiest path - tell your AI. Paste this into Claude Code, Codex, Claude Desktop, or ChatGPT:

Open an issue on https://github.com/servosity/msp-skills using the skill-request template. The system I want is [YOUR SYSTEM NAME] - my one question for the AI would be "[YOUR QUESTION]", I'm on [Mac or Windows], and my MSP has about [N] techs. Submit it.

Your AI fills the form and posts the issue. Done. (You'll need to be signed in to GitHub in your browser or have a GitHub CLI token where your AI can see it.)

Don't have an AI set up yet? Open the issue directly: Submit a skill request →. First time filing a GitHub issue? See docs/requesting-a-skill.md for a 90-second walkthrough.

More votes (👍 reactions on an issue) move a system up the roadmap. Share with one MSP friend who'd want the same skill.

Contribute a Skill or MCP

If your MSP uses a system we have not covered, send a PR. We co-build alongside contributors in Build Sessions when that is easier than going it alone.

A skill PR includes: SKILL.md (with vendor frontmatter), a README.md with the non-affiliation banner, install.sh + install.ps1, mcp-install.md if it ships an MCP server, and ideally pain-point.md + governance.md. CI enforces the contract (DCO sign-off, frontmatter schema, required files, no secrets, no personal paths). See CONTRIBUTING.md for the full checklist and the non-affiliation banner template.

About Compounding Teams

MSPs are the channel that brings AI to small business. The durable moat is the Compounding Teams methodology for running an MSP where every interaction with a tool, a customer, or a system makes the next one better. Loops close, feedback returns to the source, work compounds instead of evaporating. msp-skills is the part of that methodology you can install: the executable layer that lets your AI agent operate alongside your team in the same systems, with the same context, every day.

Glossary (for the non-developer)

• Skill - a markdown file (and a binary it drives) that tells a Claude Code / Codex agent how to operate a specific tool. Think of it as a recipe card the AI reads on the fly.
• MCP - Model Context Protocol. The open standard that lets AI apps (Claude Desktop, ChatGPT, Cursor, Windsurf, etc.) call tools on a separate server (yours).
• MCP server - the small program on your machine that exposes the tools. Every MSP Skills connector ships one (e.g. halopsa-mcp, servosity-mcp).
• PSA - Professional Services Automation. The system MSPs use for tickets, contracts, time, billing. HaloPSA, ConnectWise, Autotask are PSAs.
• BCDR / Backup and DR - Business Continuity and Disaster Recovery. Servosity is a BCDR vendor.
• Cross-client analytics - questions that span multiple clients ("how many backup failures across all 47 clients last quarter") rather than one ("show me ticket #4421").

---

Standards. Conforms to the open Agent Skills spec (Anthropic, Dec 2025; 40+ agents). MCP-compatible - works with any MCP-capable agent including Hermes and OpenClaw, with metadata.openclaw frontmatter pre-wired so openclaw skills install works on every skill.

Built by Servosity. Maintained by Damien Stevens. Apache-2.0 licensed. See TRADEMARKS.md for vendor non-affiliation and SECURITY.md to report a vulnerability. Methodology: Compounding Teams. Generated CLIs and MCP servers built with CLI Printing Press.

Last updated: 2026-11-11. Latest releases: abnormal-v0.1.11 · acronis-v0.1.12 · action1-v0.1.14 · afi-v0.1.12 · appdirect-v0.1.13 · apple-business-v0.1.4 · atera-v0.1.10 · autotask-v0.1.13 · auvik-v0.2.12 · avanan-v0.1.16 · aws-billing-v0.1.12 · axcient-v0.2.20 · backup-radar-v0.1.7 · betterstack-v0.1.11 · bitdefender-v0.1.8 · blackpoint-v0.1.4 · blumira-v0.1.10 · cipp-v0.1.14 · cisco-duo-v0.1.6 · cisco-meraki-v0.1.7 · cisco-umbrella-v0.1.4 · cloudally-v0.2.3 · comet-backup-v0.1.3 · connectsecure-v0.1.8 · connectwise-automate-v0.1.11 · connectwise-control-v0.1.13 · connectwise-manage-v0.2.6 · connectwise-rmm-v0.1.7 · cork-v0.1.12 · cove-v0.1.14 · crowdstrike-v0.1.14 · datagate-v0.1.7 · datto-bcdr-v0.1.12 · datto-rmm-v0.1.14 · datto-saas-v0.1.3 · dnsfilter-v0.1.4 · domain-cert-tracker-v0.1.3 · domotz-v0.1.11 · dropsuite-v0.1.3 · eset-protect-v0.1.3 · exchange-online-v0.1.4 · fortinet-v0.1.8 · google-workspace-v0.1.8 · gradient-v0.1.12 · halopsa-v0.2.24 · hubspot-v0.2.9 · hudu-v0.1.19 · huntress-v0.1.14 · immybot-v0.1.15 · itglue-v0.1.9 · jamf-pro-v0.1.3 · jira-service-management-v0.1.7 · kaseya-bms-v0.1.12 · kaseya-vsa-v0.1.5 · keeper-v0.1.3 · knowbe4-v0.1.11 · levelio-v0.1.10 · liongard-v0.1.11 · maxio-v0.1.11 · microsoft-graph-v0.2.11 · mimecast-v0.1.3 · mspbots-v0.1.11 · n-central-v0.1.10 · nerdio-v0.1.13 · netsapiens-v0.1.4 · ninjaone-v0.1.24 · pagerduty-v0.1.11 · pandadoc-v0.1.9 · pax8-v0.1.12 · pipedrive-v0.1.9 · proofpoint-v0.1.9 · proxmox-v0.1.6 · prtg-v0.1.4 · quickbooks-v0.1.18 · quotewerks-v0.1.5 · resourceguru-v0.1.9 · rewst-v0.1.11 · riverside-fm-v0.1.9 · rocketcyber-v0.1.12 · rootly-v0.1.9 · runzero-v0.1.11 · saas-alerts-v0.1.5 · salesbuildr-v0.1.11 · sentinelone-v0.2.8 · servosity-v0.6.16 · sherweb-v0.1.10 · skykick-v0.1.10 · sonicwall-v0.1.7 · sophos-central-v0.1.7 · superops-v0.1.18 · syncro-v0.1.9 · synology-v0.1.4 · tactical-rmm-v0.1.11 · td-synnex-v0.1.6 · threatdown-v0.1.7 · threatlocker-v0.3.15 · threecx-v0.1.3 · unifi-network-v0.1.11 · veeam-v0.1.11 · vsphere-v0.1.3 · warranty-v0.1.4 · watchguard-v0.1.7 · windows-server-v0.1.3 · wordpress-v0.1.11 · xero-v0.1.13 · zammad-v0.1.15 · zoom-phone-v0.1.4.