What is CP-MCP?
CP-MCP is a hosted MCP server that connects Claude to your Cloudpath Enrollment System. You sign in with Google, save your Cloudpath admin credentials, and add one URL to Claude as a custom connector. From then on you can ask Claude about your Cloudpath deployment in plain language, and it works against the live Cloudpath REST API on your behalf.
It covers all three Cloudpath API surfaces — Core (admin), Tenant Portal, and Property Management — plus two extra utilities on the Core surface for minting word-list passphrases and generating branded portal images.
The idea: one tool, an entire API
Section titled “The idea: one tool, an entire API”Cloudpath’s REST API spans three surfaces with hundreds of operations. Most MCP servers expose one MCP tool per API operation — with an API this large that would be unusable, and the tool definitions alone would swamp Claude’s context.
CP-MCP instead exposes exactly one MCP tool, code_mode. Inside it, Claude
writes small TypeScript programs against three namespaced objects — core,
tenant, and property — that can discover endpoints and call them. So
instead of choosing from hundreds of tools, Claude searches the API index,
reads an endpoint’s schema, and calls it — the same way you would with the docs
open.
That code runs in a sandboxed V8 isolate on Cloudflare, with your credentials applied server-side. Read How code mode works for the mechanics.
Three surfaces from one connector
Section titled “Three surfaces from one connector”| Object | Cloudpath surface | Served under |
|---|---|---|
core | Core API (admin) | /admin/publicApi |
tenant | Tenant Portal API | /admin/rest/tenant |
property | Property Management API | /admin/rest/propertyMgmtPortals/{portalGuid} |
Each object exposes the same six primitives for discovering and calling
endpoints. core adds two more:
generate_passphrase for word-list PSKs and
generate_image for branded portal logos and
favicons. See The three API surfaces.
What you can ask for
Section titled “What you can ask for”- “List the authentication servers configured on this Cloudpath.”
- “How many registration lists exist, and how many entries does each hold?”
- “Create ten memorable three-word passphrases and seed them into DPSK pool X.”
- “Generate a branded logo and favicon for this property portal and upload them.”
- “Show me the DPSK pools and which policies they’re attached to.”
Getting started
Section titled “Getting started”How your credentials are handled
Section titled “How your credentials are handled”Your Cloudpath password is encrypted at rest, decrypted only when minting a Cloudpath JWT, and never sent to Claude or included in any model context. See the Security model.