Security 🧪 Community ✓ Claude Code ✓ Claude Desktop Standalone • Blumira
Blumira
Blumira - SIEM findings management, device inventory, MSP multi-tenant operations, and security posture analysis
Installation
Install this plugin individually:
/plugin marketplace add wyre-technology/msp-claude-plugins --plugin blumira Or install all MSP plugins at once:
/plugin marketplace add wyre-technology/msp-claude-plugins Features
- Agent Monitoring
- Findings
- Msp
- Resolutions
- User Management
Skills
This plugin provides 6 skills that teach Claude about Blumira:
| Skill | Description |
|---|---|
agents | Blumira agents (sensors) and the devices they run on: device inventory and filtering, agent health via last-seen timestamps, and agent deployment keys. |
findings | The Blumira finding lifecycle: status and severity codes, resolution types, list filtering, enriched detail retrieval, assignment, and comment threads. |
msp | Blumira's MSP path group (`/msp/*`): managed-account enumeration, cross-account and per-account finding queries, per-account device, agent-key and user management, and how MSP paths differ from org paths. |
resolutions | Blumira resolution types (Valid, Not Applicable, False Positive): how to choose between them, their effect on security metrics and detection tuning, and the org- and MSP-level resolve calls. |
users | Blumira organization users: listing and filtering users, user roles, and looking up the user IDs required for finding assignment and access audits. |
api-patterns | Blumira REST API fundamentals: JWT authentication, the dual `/org/*` vs `/msp/*` path structure, suffix-based filter operators, pagination parameters and response metadata, the stateful MCP navigation tools, and HTTP error causes. |
Agents
This plugin provides 2 agents for autonomous task execution:
| Agent | Description |
|---|---|
compliance-reporter | Use this agent when generating compliance-oriented security reports from Blumira SIEM data — not for live incident investigation, but for producing evidence packages, coverage gap assessments, and log source health summaries for frameworks like SOC 2, HIPAA, and CIS. |
siem-investigator | Use this agent when investigating Blumira SIEM alerts and findings, tracing attack chains across data sources, resolving detections, auditing security posture across MSP client accounts, or producing threat investigation reports. |
Commands
Available slash commands:
| Command | Description |
|---|---|
/agent-inventory | List all devices and agents across the organization with status and health information |
/finding-triage | Triage open Blumira findings by severity, presenting a prioritized list for review |
/investigate-finding | Deep investigation of a specific Blumira finding with details, context, and comment history |
/msp-overview | MSP dashboard showing all managed accounts with open finding counts and severity breakdown |
/resolve-finding | Resolve a Blumira finding with the appropriate resolution type and notes |
/security-posture | Overall security posture review including open findings by severity, agent coverage, and trends |
API Reference
| Base URL | |
| Authentication | |
| Rate Limit | |
| Documentation |
Example Usage
List all devices and agents across the organization with status and health information
/agent-inventoryTriage open Blumira findings by severity, presenting a prioritized list for review
/finding-triageDeep investigation of a specific Blumira finding with details, context, and comment history
/investigate-findingMSP dashboard showing all managed accounts with open finding counts and severity breakdown
/msp-overviewResolve a Blumira finding with the appropriate resolution type and notes
/resolve-findingOverall security posture review including open findings by severity, agent coverage, and trends
/security-postureUsing Skills
/skill blumira:agents
Blumira agents (sensors) and the devices they run on: device inventory and filtering, agent health via last-seen timestamps, and agent deployment keys.