ManageEngine Endpoint Central Server

Python FastMCP server exposing 106 ManageEngine Endpoint Central REST API endpoints as MCP tools, integrated with Gemini Enterprise via Zoho OAuth 2.0.

Architecture

User in Gemini Enterprise
        │
        ▼
Gemini Enterprise → Zoho OAuth (accounts.zoho.in)
        │  receives access token
        ▼
MCP Server (Cloud Run)
  Authorization: Bearer <zoho_token>  →  Authorization: Zoho-oauthtoken <zoho_token>
        │
        ▼
ManageEngine Endpoint Central API
        │
        ▼
Response back to Gemini → User

Deployment

Cloud Run (Production)

Service:  verse-manageengine-mcp-server
Region:   asia-south1
Project:  gemini-project-n1
URL:      https://verse-manageengine-mcp-server-852267154002.asia-south1.run.app/mcp

To redeploy after code changes:

gcloud run deploy verse-manageengine-mcp-server \
  --source . \
  --platform managed \
  --region asia-south1 \
  --project gemini-project-n1 \
  --account [email protected] \
  --port 8080 \
  --set-env-vars "ME_BASE_URL=https://endpointcentral.manageengine.in,IAM_NAME=AaaServer,CRVIEW=CustomReportView,LOG_LEVEL=INFO,ZOHO_TOKEN_URL=https://accounts.zoho.in/oauth/v2/token"

Local Development

pip install -e .
python -m src.server

Server starts at http://0.0.0.0:8000/mcp.

Environment Variables

Variable	Description	Required
ME_BASE_URL	ManageEngine Endpoint Central base URL	Yes
IAM_NAME	Zoho IAM name (default: AaaServer)	No
CRVIEW	Custom report view name	No
PORT	Server port (default: 8000, Cloud Run uses 8080)	No
LOG_LEVEL	Logging level (default: INFO)	No
ZOHO_CLIENT_ID	Zoho OAuth Client ID (for server-managed token refresh)	Optional
ZOHO_CLIENT_SECRET	Zoho OAuth Client Secret	Optional
ZOHO_REFRESH_TOKEN	Zoho OAuth Refresh Token	Optional
ZOHO_TOKEN_URL	Zoho token endpoint	No

OAuth Setup

Register your OAuth application at api-console.zoho.in:

1. Add Client → Server-based Application
2. Set the Redirect URI to Gemini's callback URL
3. Copy Client ID and Client Secret

Scopes (comma-separated):

DesktopCentralCloud.PatchMgmt.READ,DesktopCentralCloud.PatchMgmt.Update,DesktopCentralCloud.VulnerabilityMgmt.READ,DesktopCentralCloud.DeviceControl.READ,DesktopCentralCloud.Inventory.READ,DesktopCentralCloud.SOM.READ,DesktopCentralCloud.SOM.Update,DesktopCentralCloud.CustomField.READ,DesktopCentralCloud.CustomField.Update,DesktopCentralCloud.CustomReport.READ,DesktopCentralCloud.QueryReport.READ,DesktopCentralCloud.DataEncryption.READ,DesktopCentralCloud.EndpointDLP.READ,DesktopCentralCloud.Common.READ,DesktopCentralCloud.DEX.READ

Available Tools (106 total)

Patch Management (28 tools)

patch_get_health_policy, patch_list_deployment_policies, patch_list_downloaded, patch_get_scan_details, patch_list_all, patch_list_all_systems, patch_list_all_patch_details, patch_list_supported, patch_list_configurations, patch_list_applicable, patch_get_summary, patch_get_system_report, patch_get_system_patch_report, patch_get_approval_settings, patch_get_db_update_status, patch_approve, patch_unapprove, patch_decline, patch_decline_settings, patch_scan_computers, patch_scan_all_computers, patch_install, patch_uninstall, patch_apd_create, patch_apd_modify, patch_apd_delete, patch_apd_suspend, patch_apd_resume

Vulnerability Management (8 tools)

vuln_list, vuln_list_server_misconfigurations, vuln_list_system_misconfigurations, vuln_get_system_report, vuln_get_system_vuln_report, vuln_get_server_misconfig_report, vuln_get_system_misconfig_report, vuln_get_detailed_info

Device Control (9 tools)

dc_get_file_activity, dc_get_device_audit, dc_get_file_shadow, dc_list_unique_devices, dc_list_blocked_devices, dc_get_mac_device_status, dc_get_windows_device_status, dc_list_exempted_devices, dc_list_exempted_device_types

Custom Fields (11 tools)

cf_list, cf_create, cf_update, cf_update_value, cf_delete, cf_create_data_type, cf_check_udt_name_exists, cf_get_udt_length, cf_update_computer_value, cf_get_computer_fields, cf_get_computer_metadata

Inventory (17 tools)

inv_get_summary, inv_get_filter_params, inv_list_scan_computers, inv_get_computer_summary, inv_list_software, inv_list_prohibited_software, inv_list_hardware, inv_get_installed_software, inv_get_software_licenses, inv_list_licensed_software, inv_list_software_metering, inv_get_computers_by_hardware, inv_get_computers_by_software, inv_get_computers_by_licensed_software, inv_get_computers_by_metering_rule, inv_get_computers_by_prohibited_software, inv_get_computers_by_license

SOM — Systems & OS Management (6 tools)

som_get_summary, som_list_computers, som_list_remote_offices, som_install_agent, som_uninstall_agent, som_remove_computer

Reports (4 tools)

report_list_query_reports, report_get_query_data, report_list_custom_reports, report_get_custom_data

BitLocker / Data Encryption (3 tools)

bitlocker_get_tpm_report, bitlocker_get_report, bitlocker_get_recovery_keys

Data Loss Prevention (11 tools)

dlp_get_usb_printer_report, dlp_get_network_printer_report, dlp_get_false_positives, dlp_get_endpoint_activity, dlp_get_justifications, dlp_get_rules_report, dlp_get_email_domains_report, dlp_get_web_domains_report, dlp_get_devices_report, dlp_get_applications_report, dlp_get_data_rule_violations

Common (2 tools)

common_list_custom_groups, common_get_server_properties

DEX — Digital Experience (7 tools)

dex_get_config, dex_get_addon_info, dex_get_last_update_time, dex_get_next_process_time, dex_get_latest_experience, dex_get_device_profile, dex_get_device_nodes