Loading ToolBench
MCP server for Checkpoint Harmony Email & Collaboration (Avanan) email security integration, providing tools for security event management, threat detection, quarantine/restore operations, and exception list management
Add an entry to the whitelist or blacklist. At least one match field (senderEmail, senderDomain, subject, attachmentMd5, recipient) must be provided.
⚠ DESTRUCTIVE — IRREVERSIBLE. Delete a whitelist or blacklist entry by its entity ID. This action cannot be undone and will permanently remove the exception from security policy. Confirm with the user before invoking.
Get full details for a specific security event by ID.
Check the status of an action task (quarantine/restore). Use the taskId returned by quarantine or restore tools.
List whitelist or blacklist entries in Checkpoint Harmony Email.
⚠ HIGH-IMPACT. Quarantine specific email entities by entity ID. Quarantining is reversible via restore but affects user access to emails. Returns task IDs to track progress. Confirm with the user before invoking.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 19 | 2026-07-28+ | v2 |
⚠ HIGH-IMPACT. Quarantine one or more security events by event ID. Quarantining is reversible via restore but affects user access to events. Returns task IDs to track progress. Confirm with the user before invoking.
Query Checkpoint Harmony Email security events (phishing, malware, DLP, anomaly, shadow IT, etc.). Supports filtering by type, state, severity, date range, and SaaS platform. Returns events with available remediation actions.
Restore specific quarantined email entities by entity ID.
Restore one or more previously quarantined events by event ID. Returns task IDs to track progress.
Update an existing whitelist or blacklist entry by its entity ID.