The Symbol Model Context Protocol (MCP) server allows security operators and administrative users to execute key Symbol platform workflows, such as querying users, listing companies, checking training progress, and making course assignments directly from AI assistant environments like Claude.ai, OpenCode, and others.
Prerequisites
Before connecting Symbol to your AI client, obtain your Symbol API token:
- Log in to the Symbol Admin Portal
- Navigate to Settings (for single-company environments) or Settings → Integrations (for MSP environments).
- Copy your existing API Token (or regenerate one if none exists).
1. Configuring Symbol MCP in OpenCode
OpenCode connects to remote MCP servers via its central JSON configuration file located in your user home directory.
Step-by-Step Setup
Open or create the global OpenCode configuration file located at:
~/.config/opencode/opencode.json(or~/.config/opencode/opencode.jsonc)Add the
symbolconfiguration block under themcproot key:
{
"mcp": {
"symbol": {
"type": "remote",
"url": "https://mcp.symbolsecurity.com/mcp",
"enabled": true,
"oauth": false,
"headers": {
"Authorization": "Bearer [Symbol API Token]"
}
}
}
}
Note: Replace
[Symbol API Token]with your actual API token copied from the Symbol portal. The"oauth": falseflag ensures OpenCode passes the authorization header directly without attempting standard OAuth discovery.
2. Configuring Symbol MCP in Claude (Claude.ai)
For Claude Team or Enterprise setups, administrators can enable custom connectors globally, or operators can configure individual custom connectors.
Step-by-Step Setup
Open Claude.ai and navigate to Customize → Connectors (or Organization Settings → Connectors for admins).
Click Add Custom Connector
Set the connector details:
- Name: Symbol
- URL: https://mcp.symbolsecurity.com/mcp
- Authentication Type: “No sign in” (or custom headers).
Add a custom HTTP Request Header:
- Header Name: Authorization
- Value: Bearer [Symbol API Token]
Save and connect.
3. Verifying the Connection
Once configured, verify that Symbol MCP is active and connected.
In OpenCode
Run the built-in /MCP status command in your chat window or terminal sessionor:
opencode mcp list
Verify that symbol shows a Connected / Active status.
In Claude
- Open a new chat in Claude.
- Click + → Connectors and toggle Symbol to ON.
- Type
/MCPor ask: “Is the Symbol MCP server connected?”
4. Available v1 Tools & Testing Commands
Once connected, you can run any of the v1 supported actions directly in chat:
Supported Tools
- List managed MSP companies (GET /msp/companies).
- Retrieve specific company details (GET /msp/companies/{id}).
- Retrieve users for single-company or MSP contexts (GET …/users).
- Fetch detailed user profiles (GET …/users/{id}).
- List training courses and content (GET …/training/assets).
- View assigned training records (GET …/training/list).
- Assign a training module to specific users (POST …/training/assign).
- Fetch scheduled training and security programs (GET …/programs/schedule).
Example Prompts to Try
- “List my companies.” (MSP context)
- “List our active users.”
- “Who is currently overdue on training?”
- “What training programs are scheduled for this month?”
- “Assign ‘Phishing Awareness 101’ to user [User Email] due next Friday.”
Security Note on Destructive/Write Actions: When running write operations like
assign_training, your AI client will display a prompt requiring explicit confirmation before the operation executes. Confirm the prompt to apply changes.