N-able MCP

Overview, Tools, and Client Integration Guide

Connect to N-able MCP in 2 Simple Steps

N-able MCP lets you connect such AI tools as Claude, GitHub Copilot, Gemini and many more - directly to your N-able environment. Built on the N-able GraphQL API, it gives AI assistants real-time access to N-central device data, N-sight RMM data, and more via the N-able GraphQL API.

Ask questions in natural language, run compliance checks, and query your fleet without writing code or navigating separate product APIs.

View the full list of default and custom tools currently available.

Choose endpoint

Pick the endpoint that matches your use case and risk profile before configuring any tool.
Go to endpoint setup

Connect your tool

Set token auth and configure Claude, Gemini, or Copilot with the same MCP pattern.
Go to tool setup

Verify quickly

Run two practical checks to confirm auth, schema access, and real query execution.
Go to verification

1. Choose your endpoint

N-able MCP provides three distinct endpoints for different purposes. Choose the endpoint that matches your use case before configuring your AI tool or IDE.

Live data access and modification
Both /mcp and /mcp-preview can read and modify live production data across all connected N-able products. This includes executing scripts on devices and will extend to billing and other data as the platform grows. Understand the implications before connecting to a production endpoint. Use with caution - changes affect real customer environments.

If you open the MCP endpoint in a web browser you may see an RBAC: access denied message. This is expected because N-able MCP only accepts POST requests.

Production

https://api.n-able.com/mcp

Data access

Full read and write access across all connected N-able products. Can query data, execute scripts, and modify devices.

Use case

Use this for production automations once you have fully tested your setup. Treat it with the same care as direct access to your N-able platform.

Read-only

https://api.n-able.com/mcp-read-only

Data access

Read-only. Queries and reporting only - cannot execute scripts or modify anything across any connected product.

Use case

Recommended starting point for most use cases. Use this for dashboards, compliance reports, and any AI tool that needs visibility without write access.

Preview

https://api.n-able.com/mcp-preview

Data access

Preview. Early access to new tools and data sources before they reach production API. Also has full read and write access across connected products.

Use case

Use this to try new capabilities as they are developed. Not recommended for production automations - tools and available data may change without notice.

2. Connect your AI Tool or IDE (Non-Exhaustive Examples)

Before you start: Get your API Token

To connect N-able MCP to an AI tool or IDE, you need a valid API token. Tokens are tied to the N-able SSO user account that creates them, so the token only returns data that account has permission to see.

Get your API Token

Create your token at https://n-able.app/api-token-management. Copy it somewhere safe because you will not be able to view it again after creation.
Get your token

To communicate with N-able MCP, clients must provide a valid authorization token via the HTTP header:

Authorization: Bearer <YOUR_API_TOKEN>
Simpler setup is coming
We are working on dynamic client registration, which is planned for Q3 2026. This will let supported AI tools connect to N-able MCP without manually configuring a token. For now, use the token-based setup below.

Permissions

API tokens inherit permissions from the N-able SSO user who created them, so authorization depends on that user account's access.

If a token does not have adequate permissions:

  • Queries may fail with a 401 Unauthorized error
  • Fields your user account cannot access may return null rather than an error
  • Device lists will only include customers your account has permission to see

Example: if your token was created by a user with access to 3 of your 10 customer accounts, a query for all devices will only return devices from those 3 accounts.

N-able MCP works with any MCP-compatible AI tool or IDE. Find your tool below, copy the configuration, and restart the application. If your tool is not listed, the same pattern applies: use the server URL and pass your API token in the Authorization header.


Pick your tool

Node.js/NPX path may differ by machine
Some MCP clients (especially desktop apps) do not inherit your shell PATH. If setup fails with errors like spawn npx ENOENT or command not found, use the full absolute path to npx in your MCP config instead of just npx.

Quick checks:

  • Confirm npx is installed and available in your terminal with npx --version
  • Find the executable path:
    • Windows: where npx
    • macOS/Linux: which npx
  • If your MCP client still fails, set the full path in config (examples below)
{
  "mcpServers": {
    "n-able": {
      "command": "C:/Program Files/nodejs/npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://api.n-able.com/mcp-read-only",
        "--header",
        "Authorization: Bearer <YOUR_API_TOKEN>"
      ]
    }
  }
}

Common npx locations:

  • Windows: C:/Program Files/nodejs/npx or C:/Program Files/nodejs/npx.cmd
  • macOS (Homebrew): /opt/homebrew/bin/npx (Apple Silicon) or /usr/local/bin/npx (Intel)
  • Linux: usually /usr/bin/npx or /usr/local/bin/npx

Slash hygiene (common copy/paste issue):

  • Use single forward slashes in local paths and endpoint paths
  • Avoid accidental double slashes like C://... or /mcp/preview
{
  "bad": {
    "command": "C://Program Files/nodejs/npx",
    "url": "https://api.n-able.com/mcp/preview"
  },
  "good": {
    "command": "C:/Program Files/nodejs/npx",
    "url": "https://api.n-able.com/mcp-preview"
  }
}

Claude Desktop

Anthropic desktop client using mcp-remote and the read-only endpoint https://api.n-able.com/mcp-read-only.

Claude Code

Terminal-based setup using HTTP transport with Authorization header.

Gemini CLI

Google Workspace/CLI flow using httpUrl and token header.

Copilot VS Code

VS Code agent-mode MCP setup using servers and explicit token header.

Copilot Studio

Step-by-step setup for adding N-able MCP inside a Copilot Studio agent, including connection and re-auth flow.
Open Copilot Studio setup guide
Choose your endpoint
Replace the URL in each config block below with the endpoint that matches your use case (from the Endpoints section above). The examples use /mcp-preview for safety, but you can swap in /mcp for production or /mcp-preview.

5. Verify it's working (Expected Behavior)

Verification goal
Confirm that your MCP server is visible, token auth is valid, and your AI assistant can execute real GraphQL-backed queries.

Once N-able MCP is configured properly:

✔️ There should be no console errors

  • No connection failures
  • No token-related errors
  • N-able MCP tools visible to the agent

N-able MCP server visible to the agent ✔ Requests authenticated using an API token ✔ Agent can resolve the schema and execute queries


Step 1: Quick connection check

After verification, you can test the connection by asking:

Q&A · Quick connection check

User input:
How many devices are you managing?

AI tool/agent response

You are currently managing 42 devices across all your customers.

The agent should have used the default MCP tools to run a GraphQL operation and return an expected output like:

The number will reflect the actual device count in your tenant.

This proves that:

  • Authentication is correct
  • Default tools are available
  • The N-able GraphQL API is reachable

Step 2: Real MSP example

After the quick connection check, try a query that demonstrates an operational use case for MSP automation:

Q&A · Real MSP example

User input:
Show me all Windows devices that don't have full BitLocker encryption, grouped by customer.

AI tool/agent response

You have 28 Windows devices without full BitLocker encryption across your customers. Acme Ltd has the most unprotected devices. Would you like me to list them all or break it down by customer?

Current tools

View the full list of default and custom tools currently available.


Error Handling & Troubleshooting

Fast triage
Match the exact symptom first, apply only the paired fix, then retest before changing anything else.
ProblemLikely causeFix
401 UnauthorizedToken is missing, malformed, or has been revoked.Generate a new token at https://n-able.app/api-token-management and update your AI tool or IDE configuration.
404 Not FoundThe endpoint URL is wrong.Confirm the URL is https://api.n-able.com/mcp-preview with no trailing slash.
spawn npx ENOENT or command not foundYour MCP client cannot resolve npx from PATH (common in desktop apps or service contexts).Set command to the absolute npx path (for example C:/Program Files/nodejs/npx), then restart the client. Verify the path using where npx (Windows) or which npx (macOS/Linux).
Config contains C://... or /mcp/previewPath/URL uses an incorrect slash pattern from copy/paste.Normalize to single-slash Windows paths (C:/Program Files/nodejs/npx) and use the correct endpoint format (https://api.n-able.com/mcp-preview or https://api.n-able.com/mcp-read-only).
N-able MCP tools not visible in your AI toolThe client is misconfigured or was not restarted after setup.Re-check your configuration file, save it, and fully restart the IDE or AI tool.
Query returns no results or fewer devices than expectedThe token was created by a user who does not have access to all customers in N-able.Create a new token using an account with the appropriate customer access. See the Permissions section above.
execute returns an error but other tools workexecute is not enabled in your MCP client configuration.Check your MCP configuration and ensure execute is explicitly permitted. It is the only tool that requires this.
Security fields such as BitLocker return nullBitLocker data is only available for Windows devices. Non-Windows devices and some server editions will return null.Filter your query to Windows assets using operatingSystem: { type: { equals: WINDOWS } } before checking BitLocker status.
Your AI assistant reports an unknown fieldThe field name may have changed in a recent schema update, or the field does not exist.Use the search tool to find the correct field name, or check the schema changelog in the references below for recent changes.

Additional References

Share your feedback

N-able MCP is in active development and the tools added next will be shaped by what MSP automation workflows actually need. If something is missing, broken, or could work better, let us know.


Quiz Time

Ready for a quick challenge?

Take the N-able MCP Quiz to check your understanding and reinforce key concepts.
Take the Quiz