Agent → Routine Catalog

The advanced workflows shipped so far were all converted from existing msp-claude-plugins subagents. This page classifies the whole agent library — every subagent in the repository — by how well it fits the Claude-managed scheduled-routine pattern: a cron, a set of MCP gateway connectors, and a prompt, with no servers to run. It is the backlog the next conversion batches are picked from.

The four archetypes

A scheduled routine is triggered by a clock, runs unattended, and surfaces a result to a human. That shape fits some agents cleanly and fights others. Every agent sorts into one of four archetypes:

  • A — Scheduled reporter / auditor / scorer. Read-mostly, produces a periodic report. The cleanest routine fit: a cron is exactly the right trigger.
  • B — Triage / queue manager. Makes bounded writes and uses a status transition as an idempotency guard — the way the Autotask Ticket Triage agent advances a ticket to In Progress so a rerun skips it. Fits as a routine.
  • C — Investigation. Event-triggered, deep, human-in-the-loop. A cron is the wrong trigger — these run when something fires, not on a schedule. Does not fit a routine.
  • D — Remediation / provisioning. Makes consequential writes and needs human input mid-task — offboarding, deployment, quoting. A poor unattended fit. Does not fit a routine.

The routine-fit verdict in each table summarises this: ✅ fits (clean — most A and B), ⚠️ fits with caveats (workable but needs scoping or a narrowed prompt), ❌ wrong fit (a routine is the wrong tool — most C and D). The connector(s) column lists the MCP gateway connectors a routine version would need; the cadence column is a suggested cron interval.


Archetype A — Scheduled reporters, auditors & scorers

Read-mostly agents that produce a periodic report. The cleanest routine fits — a cron is exactly the right trigger and the only write is delivering the report.

AgentPluginFitConnector(s)CadenceNote
threat-report-generatorabnormal-securityabnormalmonthlyPortfolio threat-trend rollup; clean reporter.
customer-health-scorerateraateraweeklyScores client health; pure scorer.
sla-uptime-reporterbetterstackbetterstackmonthlySLA achievement report; clean reporter.
exposure-analystblackpointblackpointweeklyAttack-surface / exposure rollup; reporter.
compliance-reporterblumirablumiramonthlySIEM compliance evidence packages; reporter.
security-posture-reviewercippcippmonthlyM365 portfolio posture sweep; auditor. CIPP posture is now partly covered by the Compliance Drift Reporter.
automation-health-checkerconnectwise-automateconnectwise-automateweeklyRMM environment health audit.
project-trackerconnectwise-manageconnectwise-manageweeklyOpen-project health review; reporter.
tenant-policy-auditorcheckpoint-avanancheckpoint-avananmonthlyEmail-policy completeness audit.
security-awareness-analystknowbe4knowbe4monthlyPhishing-sim and training results analysis.
email-security-auditorproofpointproofpointmonthlyPer-org email security posture report.
vap-reporterproofpointproofpointmonthlyVery-Attacked-Persons report; reporter.
sla-performance-reporterhalopsahalopsamonthlyRetrospective SLA compliance reporting.
client-relationship-managerhubspothubspotweeklyAccount-health portfolio review; reporter.
pipeline-health-reporterhubspothubspotweeklyPipeline health and forecast report.
documentation-auditorhuduhudumonthlyDocumentation-debt audit; auditor.
runbook-freshness-auditorhuduhudumonthlyRunbook currency/coverage audit.
compliance-auditorimmybotimmybotmonthlySoftware-compliance scorecards; auditor.
crowdsourced-intel-harvesterironscalesironscalesmonthlyThreat-intel briefing from network signal.
contract-renewal-trackerautotaskautotaskweeklyExpiring-contract and MRR tracker.
rmm-health-auditordatto-rmmdatto-rmmdaily✅ built — batch 1 (Device Health Auditor).
asset-documentation-linkerit-glueitgluemonthlyFinds broken IT Glue object linkages.
documentation-auditorit-glueitgluemonthlyIT Glue completeness/freshness audit.
compliance-drift-reporterliongardliongard, cippweekly✅ built — batch 1, expanded to CIPP baseline + posture drift.
identity-auditorm365m365monthlyM365 tenant security audit; auditor.
license-auditorm365m365monthly✅ built — batch 1 (M365 License Auditor).
email-continuity-checkermimecastmimecastdailyContinuity/archive health check.
device-health-auditorninjaone-rmmninjaone-rmmdailyNinjaOne fleet health audit; auditor.
patch-compliance-reporterninjaone-rmmninjaone-rmmweekly✅ built — batch 1 (Patch Drift Reporter).
on-call-schedulerpagerduty⚠️pagerdutyweeklySchedule-health audit fits; rota edits would need scoping out.
contract-trackerpandadocpandadocweeklyPending-proposal status tracker; reporter.
license-optimizerpax8pax8monthlyLicense-utilisation analysis; reporter.
renewal-calendarpax8pax8weeklyUpcoming-renewal calendar; reporter.
billing-reconcilerquickbooksquickbooksweekly✅ built — batch 1 (Billing Reconciler).
profitability-reporterquickbooksquickbooksmonthlyPer-client margin analysis; reporter.
margin-analyzersalesbuildrsalesbuildrweeklyQuote-margin health analysis; reporter.
endpoint-hardening-auditorsentinelonesentineloneweeklyEndpoint config-hardening audit.
billing-reconcilersherwebsherwebmonthlyDistributor billing reconciliation; reporter.
customer-account-auditorsherwebsherwebweeklyPortfolio AR/account-health audit.
automation-opportunity-findersuperops-aisuperops-aimonthlyRetrospective ticket-pattern analysis.
billing-auditorsyncro-mspsyncro-mspweeklyBilling completeness/accuracy audit.
fleet-health-auditorthreatlockerthreatlockerweeklyFleet inventory/hygiene report; auditor.
booking-pipeline-auditortimezesttimezestweeklyScheduling-pipeline report; reporter.
client-360-brieferwyre-gateway⚠️wyre-gateway (multi)on-demandPer-client briefing; better on-demand than crewed, but read-only and routine-shaped.
renewal-risk-analyzerwyre-gatewaywyre-gateway (multi)weeklyChurn-risk scoring across accounts; scorer.
security-posture-scorerwyre-gatewaywyre-gateway (multi)monthlyvCISO-style scored security health check.
technician-performance-coachwyre-gatewaywyre-gateway (multi)monthlyTechnician-performance trend report.
qbr-prep-agentwyre-gatewaywyre-gateway (multi)weekly✅ built — batch 1 (QBR Prep).
onboarding-completeness-checkerwyre-gateway⚠️wyre-gateway (multi)on-demandOnboarding checklist; routine-shaped but naturally event-triggered per new client.
gateway-opswyre-gatewaywyre-gateway (admin)weeklyGateway usage/anomaly audit; reporter.
billing-reconcilerxeroxeroweeklyXero billing reconciliation; reporter.
cash-flow-analyzerxeroxeroweekly90-day cash-flow projection; reporter.

Archetype B — Triage & queue managers

Agents that work a queue and make bounded writes. They fit as routines when a status transition acts as an idempotency guard, so a scheduled rerun skips what it already handled.

AgentPluginFitConnector(s)CadenceNote
msp-ops-assistantatera⚠️ateradailyCombined alert/ticket triage; narrow to a triage-only routine.
alert-response-coordinatorblackpoint⚠️blackpointhourlyRanks the detection queue; routine-fit if it only triages, not escalates autonomously.
service-desk-opsconnectwise-manageconnectwise-managehourlyQueue/SLA review; status transition guards reruns.
training-enforcerknowbe4knowbe4weeklyFlags overdue training, drafts re-enrol campaigns; bounded writes.
service-desk-opshalopsahalopsahourlyHaloPSA queue triage; idempotent via ticket status.
ticket-dispatcherautotaskautotaskhourlyAutotask queue triage — the canonical archetype-B fit.
quarantine-release-reviewerspamtitan⚠️spamtitandailyQuarantine digest fits; releasing mail is a consequential write — keep it digest-only.
msp-service-opssuperops-ai⚠️superops-aidailyCombined PSA/RMM review; narrow to a triage-only routine.
msp-service-opssyncro-msp⚠️syncro-mspdailyCombined queue/device/billing review; narrow to a triage-only routine.
approval-triage-analystthreatlockerthreatlockerhourlyClassifies the approval queue; recommends rather than auto-approves.
incident-war-room-coordinatorwyre-gatewaywyre-gateway (multi)n/aTriage-shaped but fires on a declared P1 — event-triggered, not scheduled.

Archetype C — Investigations

Event-triggered, deep, human-in-the-loop. These run when an alert, detection, or report fires — a cron is the wrong trigger, so they are a wrong fit for a routine.

AgentPluginFitConnector(s)CadenceNote
email-threat-analystabnormal-securityabnormaln/aBEC/ATO investigation; triggered by a detected threat.
uptime-incident-responderbetterstackbetterstackn/aResponds to a fired uptime incident.
detection-investigatorblackpointblackpointn/aMDR detection deep-dive; event-triggered forensics.
siem-investigatorblumirablumiran/aSIEM finding investigation; human-in-loop.
cloud-email-defendercheckpoint-avanancheckpoint-avanann/aQuarantine/threat-event investigation.
incident-responderhuntresshuntressn/aSOC-escalation triage and live incident response.
soc-alert-investigatorrocketcyberrocketcybern/aSOC incident investigation; event-triggered.
threat-correlation-analystrocketcyberrocketcyber, datto-rmm, itglue, autotaskn/aCross-platform threat correlation; investigation.
change-detectiveliongard⚠️liongardweeklyChange detection is partly schedulable, but unauthorised-change follow-up is investigative.
email-threat-investigatormimecastmimecastn/aEmail-threat tracing; investigation.
incident-commanderpagerdutypagerdutyn/aCommands an active incident; event-triggered.
incident-commanderrootlyrootlyn/aCommands an active Rootly incident; event-triggered.
post-mortem-writerrootlyrootlyn/aPIR writeup; triggered by a resolved incident, not a clock.
threat-huntersentinelonesentinelonen/aIOC sweeps and threat hunts; deep investigation.
spam-filter-analystspamtitanspamtitann/aHeld-email investigation and filter tuning.
threat-investigatorthreatlockerthreatlockern/aSecurity-event timeline reconstruction; investigation.

Archetype D — Remediation & provisioning

Consequential writes that need human input mid-task — offboarding, deployment, provisioning, quoting. A poor unattended fit; a routine is the wrong tool.

AgentPluginFitConnector(s)CadenceNote
user-offboarding-runnercippcippn/aFull M365 offboarding sequence; consequential, human-driven.
procurement-specialistconnectwise-manageconnectwise-managen/aCatalog edits and quote assembly; needs human input.
client-onboarding-validatorhuntress⚠️huntresson-demandMostly validation/reporting; runs per onboarding, so event-triggered not crewed.
endpoint-remediation-specialistimmybotimmybotn/aRuns remediation scripts on endpoints; consequential writes.
software-deployment-orchestratorimmybotimmybotn/aPlans and executes software rollouts; needs human gating.
phishing-responderironscalesironscalesn/aQuarantine/remediation of reported phishing; consequential.
backup-health-monitordatto-rmmdatto-rmmn/aReporter-shaped but not viable — see note below; no backup data in Datto RMM.
quote-buildersalesbuildrsalesbuildrn/aBuilds quotes; consequential and needs human input.
subscription-provisionersherwebsherwebn/aProvisions/changes subscriptions; consequential writes.
template-standardizerpandadocpandadocn/aEdits proposal templates; consequential and judgement-heavy.
psa-integration-specialisttimezesttimezestn/aBuilds/repairs PSA association payloads; consequential config work.
scheduling-dispatchertimezesttimezestn/aBooks technicians against tickets; consequential, request-driven.
compliance-evidence-packagerwyre-gateway⚠️wyre-gateway (multi)on-demandLargely read+assemble, but runs per formal audit — event-triggered, not crewed.

Reading this as a backlog

Archetype A and B agents are the program backlog: A agents convert almost verbatim into scheduled reporting routines, and B agents convert once a status transition is identified as the idempotency guard. Future conversion batches are picked from this catalog — an archetype-A or archetype-B row, paired with a delivery adapter, is a workflow waiting to be written. Archetype C and D agents are deliberately left alone: they are real, useful agents, but a cron is the wrong trigger for them.

The catalog also records agents that look convertible but are not. datto-rmm's backup-health-monitor reads as a textbook archetype-A reporter — a scheduled backup-health rollup. It is listed under archetype D as not routine-viable today for a different reason: Datto RMM exposes no backup data. Backup and BC/DR live in the separate Datto BCDR product, which the gateway does not connect. A routine built from this agent would have nothing to read. It is a useful reminder that this catalog classifies fit — and that connector coverage, not just archetype, decides whether a workflow can actually be built.

Spotted an agent that should be the next workflow? Open an issue in the msp-claude-plugins repository.