Developer Platform

SiberMate Developer Docs.

Build secure REST API integrations and connect MCP-compatible AI clients to automate security awareness workflows.

Connect MCP API reference

Remote MCP

Connect SiberMate to your AI client.

Use the default remote MCP URL for one tenant, or a domain profile URL when your client needs multiple SiberMate tenants side by side.

Works with MCP-compatible clients

Choose the URL that matches your client setup.

Keep the default endpoint for one tenant. Use a domain profile when the same client needs multiple SiberMate tenants configured side by side.

Default

Single tenant connection

Use this for normal remote MCP setup and local bridge defaults.

https://mcp.sibermate.com/mcp

Multi-tenant

Domain profile connection

Use the tenant domain in the path. SiberMate verifies it against the API key.

https://mcp.sibermate.com/profile/{YOUR TENANT DOMAIN}/mcp

Example: https://mcp.sibermate.com/profile/sibermate.com/mcp

Choose your setup path

Start with remote OAuth when your client supports it.

Recommended

OAuth with tenant approval

Generate a tenant API key from Platform > Settings > API. During setup, SiberMate verifies the key and issues refreshable MCP bearer tokens scoped to that tenant.

For multiple tenant connectors, use /profile/{domain}/mcp. The domain must match the tenant domain returned for the API key.

Fallback

Use a dedicated key as a bearer token

If your client supports custom headers for remote MCP, send a dedicated tenant API key as Authorization: Bearer <SIBERMATE_API_KEY>. Profile URLs verify the key against the domain in the URL before tools run.

Local clients

Bridge local stdio clients to the remote server

Use this for Claude Code, Cursor, and other clients that prefer local or stdio MCP servers while keeping https://mcp.sibermate.com/mcp as the canonical server.

Command

npx -y @sibermatedev/mcp

MCP config example

JSON

{
  "mcpServers": {
    "sibermate": {
      "command": "npx",
      "args": ["-y", "@sibermatedev/mcp"],
      "env": {
        "SIBERMATE_API_KEY": "..."
      }
    }
  }
}

Start with a narrow request, then approve actions.

Pick a category and copy a prompt into your connected MCP client.

Available context

Learners, training, policies, phishing, reports, and breach exposure.

Learners

Plan learner follow-up

Find learners who need follow-up, group them by risk score and manager, then draft the reminder or assignment plan before making changes.

Uses: sibermate_list_learners sibermate_list_groups

Onboarding

Automate new hire setup

Show an onboarding plan. After approval, create learners, attach groups, assign baseline courses and policies, then return an action log.

Uses: sibermate_create_learner sibermate_update_learner_groups sibermate_create_course_enrollment

Review

Audit learner records

Review learner records for missing fields, inactive users, possible duplicates, and group gaps. Summarize what I should verify before updates.

Uses: sibermate_list_learners sibermate_list_groups

Learning

Queue training actions

Create a learning progress brief. Highlight overdue signals, priority learners or groups, and a proposed assignment or reminder plan.

Uses: sibermate_get_learning_report sibermate_get_course_participation_report

Courses

Find course fit

List available courses and recommend a baseline set for new employees. Explain each choice and ask approval before assignment.

Uses: sibermate_list_courses sibermate_list_groups

Reminders

Draft reminder routine

Find overdue or incomplete training, group learners by priority, then draft reminder messages and a send plan for approval.

Uses: sibermate_get_learning_report sibermate_send_course_reminder

Policies

Draft a policy workflow

Summarize published policies, find missing acknowledgements or review gaps, and draft a policy reminder workflow for approval.

Uses: sibermate_list_policies

Policy rollout

Publish from template

Find an acceptable use template. Draft the workflow, ask confirmation, then create, publish, assign, and summarize the rollout.

Uses: sibermate_list_policy_templates sibermate_create_policy_from_template sibermate_publish_policy_draft

Acknowledgements

Chase missing acknowledgements

Find policies with missing acknowledgements, identify affected learners or groups, and draft the reminder plan and message text.

Uses: sibermate_list_policies sibermate_send_policy_reminder

Phishing

Prepare a simulation routine

Review phishing performance, identify groups needing reinforcement, and draft a simulation routine with timing and confirmation steps.

Uses: sibermate_list_simulations sibermate_get_simulation_metrics

Coaching

Coach risky groups

Analyze simulation results, find groups needing coaching, and draft follow-up training, manager notes, and learner-safe wording.

Uses: sibermate_list_simulations sibermate_get_simulation_metrics

Review

Summarize campaign health

Summarize phishing health. Highlight risky trends, improving groups, and next actions for the security awareness owner.

Uses: sibermate_list_simulations sibermate_get_simulation_metrics

Reports

Prepare a readiness brief

Prepare an executive readiness brief from risk history, course results, and gap analysis. Recommend three next actions.

Uses: sibermate_get_risk_score_history_report sibermate_get_course_results_report sibermate_get_gap_analysis_results_report

Trends

Explain risk movement

Review risk score history, explain what changed, identify likely drivers, and note evidence I should verify before reporting.

Uses: sibermate_get_risk_score_history_report

Customer call

Build meeting notes

Create meeting notes from training, gap analysis, and risk reports. Include wins, blockers, questions, and follow-up actions.

Uses: sibermate_get_course_results_report sibermate_get_gap_analysis_results_report sibermate_get_risk_score_history_report

Breaches

Coordinate exposure response

Check breach exposure, summarize affected accounts and services, then draft learner messaging, escalation notes, and evidence to verify.

Uses: sibermate_list_breached_accounts sibermate_list_breached_services

Services

Prioritize exposed services

List breached services, group them by business impact, and draft a prioritized verification checklist for the security team.

Uses: sibermate_list_breached_services

Response

Draft learner response

Review breached accounts and draft a learner-safe response plan: what to verify, communicate, and avoid claiming early.

Uses: sibermate_list_breached_accounts sibermate_list_breached_services

API Reference

Every endpoint below is generated from the OpenAPI contract, including request schemas, success examples, and client-safe error responses.

Static versions: HTML Markdown OpenAPI JSON

api.sibermate.com