huntress

Plugin huntress from marketplace msp-claude-plugins in WYRE-AI/msp-claude-plugins. Commands read from the repo's manifest — yesterday.

Skills (7)

• Huntress Agents

  Huntress endpoint agents: the agent lifecycle, organization and platform filters, health signals such as `last_seen_at` and version, fleet-audit workflows, and the errors returned for missing or empty agent results. When listing, filtering, or investigating Huntress endpoint agents, or auditing flee

• Huntress API Patterns

  Huntress MCP fundamentals: HTTP Basic Auth via API key/secret headers, the full MCP tool catalog, token-based pagination, the 60 req/min rate limit, and the common HTTP error codes with their causes. When authenticating to or calling Huntress through the MCP tools, or diagnosing a failed Huntress re

• Huntress Billing

  Huntress billing and summary reports: what each report type contains, the list/get tools for both, and the monthly reconciliation, QBR security summary, and cost-analysis workflows an MSP builds from them. When pulling Huntress billing or summary reports for invoicing, reconciliation, or a client-fa

• Huntress Escalations

  Huntress SOC escalations: how an escalation differs from an incident, escalation priority levels, the list/get/resolve tools, escalation-to-incident correlation, and the already-resolved and not-found error cases. When reviewing or resolving escalations raised by the Huntress SOC team. Use when: hun

• huntress-incidents

  Huntress incidents and the remediation lifecycle: querying incidents by organization and status, SOC-recommended remediation details, individual and bulk approve/reject, remediation execution status, and the ordering constraint that incidents resolve only after all remediations are processed.

• Huntress Organizations

  Huntress organizations as the multi-tenant boundary: org structure, the organization key used for agent deployment, full CRUD operations, client onboarding and offboarding workflows, and the duplicate-key and active-agent deletion errors. When creating, listing, updating, or deleting Huntress organi

• Huntress Signals

  Huntress security signals: how signals differ from incidents, the signal types, listing and filtering by organization, and the threat-hunting and pattern-analysis workflows built on signal data. When monitoring, filtering, or investigating Huntress signals, or hunting for threat patterns across mana

Slash commands (6)

• /huntress:agent-inventory

  List and filter Huntress agents across organizations

• /huntress:billing-report

  Generate a Huntress billing summary for a period

• /huntress:incident-triage

  Triage open Huntress incidents by severity

• /huntress:investigate-incident

  Deep dive investigation into a specific Huntress incident with remediations

• /huntress:org-health

  Organization health check covering agents, incidents, and escalations

• /huntress:resolve-escalation

  Review and resolve a Huntress escalation

Subagents (2)

• client-onboarding-validator

  Use this agent when validating a newly onboarded client in Huntress — checking that agents are deployed and reporting, confirming SOC coverage is active, identifying any endpoints missing agents, and surfacing initial detections that fired during or after deployment. Trigger for: Huntress onboarding

• incident-responder

  Use this agent when triaging Huntress incidents, reviewing SOC escalations, approving or rejecting endpoint remediations, investigating security signals, or managing the Huntress agent fleet across MSP client organizations. Trigger for: Huntress incident, Huntress remediation, SOC escalation Huntres

Similar plugins