Security 🧪 Community ✓ Claude Code ✓ Claude Desktop Standalone • Inforcer

Inforcer

Inforcer - Microsoft 365 security baseline governance for MSPs: managed tenants, baseline templates, alignment/drift, secure scores, identity inventory, audit events, and assessment runs (read-only, plus one assessment-run action)

Installation

Install this plugin individually:

/plugin marketplace add wyre-technology/msp-claude-plugins --plugin inforcer

Or install all MSP plugins at once:

/plugin marketplace add wyre-technology/msp-claude-plugins

Features

Assessments
Audit Events
Baseline Alignment
Compliance Reporting
Identity Governance
Tenant Management

Skills

This plugin provides 7 skills that teach Claude about Inforcer:

Skill	Description
`assessments`	Use this skill when listing Inforcer assessments or triggering an assessment run.
`audit-events`	Use this skill when searching Inforcer audit events and listing the available event types — the read-only history of changes and activity Inforcer has recorded.
`baseline-alignment`	Use this skill when working with Inforcer baselines and alignment — listing baseline templates, reading alignment scores, and pulling alignment details (the per-policy drift breakdown of a tenant against its assigned baseline).
`compliance-reporting`	Use this skill when building Inforcer compliance and posture reports — reading per-tenant Microsoft 365 secure scores, combining them with alignment scores, and applying the alignedThreshold / semiAlignedThreshold settings that classify each tenant or policy as aligned, semi-aligned, or drifted.
`identity-governance`	Use this skill when reading a tenant's identity inventory through Inforcer — listing users, groups, and role assignments for a scoped managed Microsoft 365 tenant.
`tenant-management`	Use this skill when working with Inforcer tenants — listing managed Microsoft 365 tenants, resolving a friendly name, DNS domain, or Azure AD GUID to the integer Client Tenant ID, and scoping every other Inforcer operation to the right tenant.
`api-patterns`	Use this skill when working with the Inforcer MCP tools — the gateway X-Inforcer-Region / X-Inforcer-Api-Key headers, the region-based base URL and upstream Inf-Api-Key header, the /beta/ route prefix, the {success,message,errors,data} response envelope, continuationToken pagination, and the integer Client Tenant ID vs Azure AD GUID gotcha.

Agents

This plugin provides 1 agent for autonomous task execution:

Agent	Description
`inforcer-drift-reporter`	Use this agent when an MSP security lead, vCISO, or service manager needs to sweep the managed Microsoft 365 portfolio for baseline drift and posture using Inforcer — pulling alignment scores, per-policy drift detail, and secure scores across tenants and summarizing them into a prioritized picture.

Commands

Available slash commands:

Command	Description
`/drift-report`	Portfolio-wide Inforcer baseline drift report — every managed tenant's alignment vs its assigned baseline, classified aligned / semi-aligned / drifted and sorted drifted-first, with secure score
`/tenant-posture`	Single-tenant Microsoft 365 posture snapshot from Inforcer — secure score plus alignment score, band, and the per-policy drift detail against the tenant's assigned baseline

API Reference

Base URL
Authentication
Rate Limit
Documentation

Example Usage

Portfolio-wide Inforcer baseline drift report — every managed tenant's alignment vs its assigned baseline, classified aligned / semi-aligned / drifted and sorted drifted-first, with secure score

/drift-report

Single-tenant Microsoft 365 posture snapshot from Inforcer — secure score plus alignment score, band, and the per-policy drift detail against the tenant's assigned baseline

/tenant-posture

Using Skills

/skill inforcer:assessments

Use this skill when listing Inforcer assessments or triggering an assessment run.