Kiteworks MCP Server

The Kiteworks MCP Server enables Large Language Model (LLM) applications to securely interact with your Kiteworks instance through the Model Context Protocol (MCP). This cross-platform server provides AI assistants with the ability to create Secure Data Forms, manage files, folders, and user information within your Kiteworks environment while maintaining enterprise-grade security.

Key Capabilities

End-User:

• File Management: Upload, download, retrieve metadata, rename, move, copy, and delete files (single or multiple)
• Folder Operations: Navigate hierarchies; create, rename, move, and delete folders (single or multiple)
• Search by Name or Content: Search for files and folders by name or content
• Request Files: Invite recipients by email to upload files into a Kiteworks folder
• Sharing & Permissions: List folder and file members, add, update, or remove them (with confirmation)
• Secure Email: List and read Kiteworks mail with mailbox counters, compose policy-validated drafts, and send them (with confirmation)
• Forms Creation: Generate Kiteworks Forms from templates with preview links
• User Information: Access current user details and authentication status

Admin:

• User Management: Search users, retrieve detailed user metadata, create users, update user information, and reset TOTP enrollment
• User Profiles: List, inspect, and create profiles, test mapping rules, and assign users individually or in bulk
• Shared Mailboxes: List, create, and delete shared mailboxes and manage their members
• Activity Logs: Query user and admin activity with date range, free-text search, and event filtering
• Risk Policies: Retrieve Kiteworks risk policies (read-only)

Security & Platform:

• OAuth 2.1 Security: Dynamic Client Registration, Authorization Code flow with PKCE, JWT access and refresh tokens with automatic refresh
• FIPS 140-3 Mode: AES-256-GCM encryption, RSA Signature with SHA-256, TLS 1.3 with NIST-approved curves
• Quantum-resistant forward secrecy: Hybrid X25519+ML-KEM-768 key exchange for TLS (FIPS 203)
• Rate Limiting: Configurable limits at global, per-user, and per-session levels
• Cross-Platform: Native binaries for Windows, Linux, and macOS, plus a Docker container image

Deployment Modes

• Local STDIO Server: Single-user deployment, able to upload / download files locally
• Remote HTTPS Server: Multi-user centralized HTTPS server with OAuth authentication, running as a Docker container or a systemd service
• Claude Desktop extension: Native extension package (.mcpb) for Claude Desktop

Usage Examples and Available Tools

• Usage Examples - Check the detailed examples showing more complex operations, such as ‘Compliance Review with Forms’, ‘Sensitive Data Audit’, ‘Collect and Download Deliverables for Review’, ‘Project Handover’, etc.