A skill for Blumira's managed-service-provider tools, which let one security provider work across several client organisations. It covers client-account lists, cross-account findings, and account-specific devices, users, and agent keys.

Use it to enumerate client accounts, search findings across clients, and manage devices, users, and agent keys within a selected client account.

It clarifies the difference between working in one organisation and working across managed clients. This helps operators use the correct account scope and credentials for each task.

Blumira MSP — Skill for Claude Code by WYRE-AI

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add WYRE-AI/msp-claude-plugins --skill msp

Clone the repo

git clone --depth 1 https://github.com/WYRE-AI/msp-claude-plugins

Made for: Claude Code.

Or install blumira, the plugin that ships this one along with the rest of its 4 skills, 6 commands, 2 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/wyre-ai/msp-claude-plugins/msp.svg)](https://agentmods.dev/skills/wyre-ai/msp-claude-plugins/msp)

Your own site

<a href="https://agentmods.dev/skills/wyre-ai/msp-claude-plugins/msp"><img src="https://agentmods.dev/badge/skills/wyre-ai/msp-claude-plugins/msp.svg" alt="Measured on agentmods" height="20"></a>

Per session 50 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,461 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector pass 7 Sept 2026

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00050	$0.01461
Opus 5	$0.00025	$0.00731
Sonnet 5	$0.00010	$0.00292
Haiku 4.5	$0.00005	$0.00146

Measured 4d ago against content hash 31671f40e9fd, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

Blumira MSP scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

msp-claude-plugins/blumira/blumira/skills/msp/SKILL.md · 222 lines

How it starts

The opening of the file, as written. The whole thing — 222 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Blumira MSP Operations

Overview

Blumira's MSP path group (/msp/*) enables managed service providers to operate across multiple client organizations from a single set of credentials. This skill covers account management, cross-account queries, and per-account operations.

Anti-triggers

Working inside a single organization with org-level credentials — the /msp/* tools need an MSP-scoped JWT and an account_id on every call. Use blumira-findings, blumira-agents, or blumira-users.
"MSP" meaning the multi-tenant view of another vendor — an M365-tenant portfolio is cipp-tenants or inforcer-tenant-management; a CompassOne partner sweep is blackpoint-multi-tenant-operations.
Resolution-type semantics — the codes behave identically at MSP and org level and are documented once, in blumira-resolutions.

Key Concepts

MSP vs Org Paths

Feature	Org Path (`/org/*`)	MSP Path (`/msp/*`)
Scope	Single organization	Multiple managed accounts
Findings	Own findings only	All accounts or per-account
Devices	Own devices only	Per-account device lists
Users	Own users only	Per-account user lists
Auth	Org-level JWT	MSP-level JWT

Account Context

MSP tools require an account_id parameter to target a specific client account. Use blumira_msp_accounts_list to enumerate available accounts.

API Patterns

List Managed Accounts

blumira_msp_accounts_list
  page_size=100

Get Account Details

blumira_msp_accounts_get
  account_id=<UUID>

Cross-Account Findings

blumira_msp_findings_all
  status.eq=10
  severity.in=HIGH,CRITICAL
  order_by=-created

Returns findings from ALL managed accounts with account context included.

Per-Account Findings

blumira_msp_findings_list
  account_id=<UUID>
  status.eq=10

Get a Finding in Account Context

blumira_msp_findings_get
  account_id=<UUID>
  finding_id=<UUID>

Read the full file on GitHub · 222 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

4d ago First seen · 222 lines · 50 tokens per session scan A 31671f40e9fd

Subscribe to this mod's changes

Blumira MSP is a skill published in the GitHub repository WYRE-AI/msp-claude-plugins (45 stars, last pushed 5d ago), licensed Apache-2.0. It adds 50 tokens to every session and 1,461 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.

Claude Code Project management Security claude claude-plugins msp psa rmm

decision-map

Turn a loose idea into a git-tracked, session-resumable map of typed investigation tickets, then drive them to resolution one at a time. The planning-loop engine for work that is still being figured out — too fuzzy for a campaign, too big for a single intake item. Resolved tickets graduate into .planning/intake/ for…

SethGammon/Citadel · 77 tokens

Blumira MSP