Command
find-contact
Resolve a 3CX contact or extension by email, extension, or name
@wyre-technologyView CommandDevelopment
Command
/search-detections
List recent Blackpoint Cyber detections for a tenant
Install
$ npx -y skills add wyre-technology/msp-claude-plugins --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/search-detections
Context preview
What this command does when you run it.
List recent Blackpoint Cyber detections for a tenant
Command definition
search-detections.mddescription: List recent Blackpoint Cyber detections for a tenant
argument-hint: "[tenant]"
arguments: [tenant]
Blackpoint Detection Search
List recent CompassOne detections, then enrich each with its affected asset for an investigation-ready view.
Arguments
- `tenant` (optional) — Tenant name or ID to scope the search
Prerequisites
- Blackpoint MCP server connected with a valid `BLACKPOINT_API_TOKEN`
- Tools available: `blackpoint_tenants_list`, `blackpoint_detections_list`, `blackpoint_detections_get`, `blackpoint_assets_get`
Steps
1. **Resolve tenant scope**
If `tenant` was supplied, call `blackpoint_tenants_list` and match. Otherwise, list across all tenants the partner can see.
2. **List detections**
Call `blackpoint_detections_list` for the chosen tenant scope.
3. **Enrich the top results**
For the top N (e.g. 10) detections, call `blackpoint_detections_get` and `blackpoint_assets_get` for the affected asset.
4. **Output**
- Detection count, severity distribution, time range
- Top 10 detection table: timestamp, severity, detection type, asset hostname, tenant
- Suggested follow-up assets to investigate further (`blackpoint_assets_relationships`)
Examples
All recent detections, partner-wide
/search-detections
Drill into one tenant
/search-detections "Acme Corp"
Related Commands
- (none yet)
Read more
description: List recent Blackpoint Cyber detections for a tenant argument-hint: "[tenant]" arguments: [tenant]
Blackpoint Detection Search
List recent CompassOne detections, then enrich each with its affected asset for an investigation-ready view.
Arguments
- `tenant` (optional) — Tenant name or ID to scope the search
Prerequisites
- Blackpoint MCP server connected with a valid `BLACKPOINT_API_TOKEN`
- Tools available: `blackpoint_tenants_list`, `blackpoint_detections_list`, `blackpoint_detections_get`, `blackpoint_assets_get`
Steps
1. **Resolve tenant scope**
If `tenant` was supplied, call `blackpoint_tenants_list` and match. Otherwise, list across all tenants the partner can see.
2. **List detections**
Call `blackpoint_detections_list` for the chosen tenant scope.
3. **Enrich the top results**
For the top N (e.g. 10) detections, call `blackpoint_detections_get` and `blackpoint_assets_get` for the affected asset.
4. **Output**
- Detection count, severity distribution, time range
- Top 10 detection table: timestamp, severity, detection type, asset hostname, tenant
- Suggested follow-up assets to investigate further (`blackpoint_assets_relationships`)
Examples
All recent detections, partner-wide
/search-detections
Drill into one tenant
/search-detections "Acme Corp"
Related Commands
- (none yet)
Ships withmsp-claude-plugins
One command to supercharge Claude Code for MSP workflows. Then restart Claude Code. That's it. Documentation: mcp.wyre.ai
Get the whole plugin
Stats
45
Stars
24
Forks
Active
Maintenance
Astro
Language
Apache-2.0
License
12d ago
Last commit
7mo ago
Created
Repo: wyre-technology/msp-claude-plugins
Other commands on msp-claude-plugins.
@wyre-technologyView CommandCommand
Command
Command
Command
search-threats
Search for specific threat patterns in Abnormal Security by sender, recipient, attack type, or keywords
@wyre-technologyView CommandCommand
threat-triage
Triage recent email threats detected by Abnormal Security by severity and attack type
@wyre-technologyView Command