Security 🧪 Community ✓ Claude Code ✓ Claude Desktop Standalone • Blackpoint
Blackpoint
Blackpoint Cyber / CompassOne MDR - tenants, assets, detections, vulnerabilities (dark web, external, scans)
Installation
Install this plugin individually:
/plugin marketplace add wyre-technology/msp-claude-plugins --plugin blackpoint Or install all MSP plugins at once:
/plugin marketplace add wyre-technology/msp-claude-plugins Features
- Asset Inventory
- Incident Response
- Multi Tenant Operations
- Vulnerability Management
Skills
This plugin provides 5 skills that teach Claude about Blackpoint:
| Skill | Description |
|---|---|
asset-inventory | Use this skill when working with Blackpoint Cyber (CompassOne) asset data — listing assets by class for a tenant, searching across classes, pulling asset detail, and walking parent/child/sibling relationships to build a blast-radius or topology view. |
incident-response | Use this skill when investigating a Blackpoint Cyber detection — drilling from a tenant to its assets, walking the detection list, pulling vulnerability and dark-web context, and assembling an incident timeline. |
multi-tenant-operations | Use this skill when operating Blackpoint Cyber (CompassOne) at the MSP partner level — enumerating customer tenants, sweeping detections and vulnerabilities across all of them, spotting volume anomalies, and building per-tenant scorecards. |
vulnerability-management | Use this skill when analyzing Blackpoint Cyber (CompassOne) exposure data — host vulnerability findings filtered by CVE and exploitability, vulnerability scan history, dark-web credential and data leaks, and external internet-facing exposures. |
api-patterns | Use this skill when working with the Blackpoint Cyber (CompassOne) MCP tools — Bearer token authentication, the partner-tenant-asset hierarchy, navigation tools, and the read-only tool surface across tenants, assets, detections, and vulnerabilities. |
Agents
This plugin provides 3 agents for autonomous task execution:
| Agent | Description |
|---|---|
alert-response-coordinator | Use this agent when triaging the Blackpoint Cyber / CompassOne detection queue across one or many tenants — ranking open detections by severity and tenant impact, deciding what needs immediate escalation to the Blackpoint SOC versus routine follow-up, and producing a prioritized response plan. |
detection-investigator | Use this agent when investigating a Blackpoint Cyber / CompassOne MDR detection — reconstructing what fired, drilling from tenant to affected asset, mapping the asset's relationships to estimate blast radius, and cross-referencing vulnerabilities and dark-web exposure for context. |
exposure-analyst | Use this agent when assessing a tenant's attack-surface and exposure posture in Blackpoint Cyber / CompassOne — rolling up vulnerability findings, internet-facing external exposures, dark-web credential leaks, and scan coverage into a prioritized remediation view for QBRs, security reviews, or risk reporting. |
Commands
Available slash commands:
| Command | Description |
|---|---|
/investigate-detection | Investigate a single Blackpoint Cyber / CompassOne detection end-to-end |
/partner-overview | Portfolio-level Blackpoint Cyber / CompassOne rollup of detections and exposure across all tenants |
/search-detections | List recent Blackpoint Cyber detections for a tenant |
/tenant-exposure | Build a prioritized exposure report for a Blackpoint Cyber / CompassOne tenant |
/triage-detections | Sweep and prioritize the open Blackpoint Cyber / CompassOne detection queue across tenants |
API Reference
| Base URL | |
| Authentication | |
| Rate Limit | |
| Documentation |
Example Usage
Investigate a single Blackpoint Cyber / CompassOne detection end-to-end
/investigate-detectionPortfolio-level Blackpoint Cyber / CompassOne rollup of detections and exposure across all tenants
/partner-overviewList recent Blackpoint Cyber detections for a tenant
/search-detectionsBuild a prioritized exposure report for a Blackpoint Cyber / CompassOne tenant
/tenant-exposureSweep and prioritize the open Blackpoint Cyber / CompassOne detection queue across tenants
/triage-detectionsUsing Skills
/skill blackpoint:asset-inventory
Use this skill when working with Blackpoint Cyber (CompassOne) asset data — listing assets by class for a tenant, searching across classes, pulling asset detail, and walking parent/child/sibling relationships to build a blast-radius or topology view.