Proofpoint MCP Tools & API Patterns

What problem does it solve?

This Skill provides a comprehensive guide to interacting with Proofpoint's TAP and Essentials APIs, addressing common challenges like authentication, region selection, pagination, and rate limiting.

Core Features & Use Cases

• API Authentication: Details HTTP Basic Auth using service principals and secrets.
• API Differentiation: Explains the distinct purposes and base URLs for TAP (threat intelligence) and Essentials (email security management) APIs.
• Region Management: Guides on selecting the correct Proofpoint data region for accurate results.
• Tooling: Lists available MCP tools for threat hunting, message tracing, and MSP management.
• Pagination & Rate Limiting: Provides strategies for handling API response pagination and respecting rate limits.
• Error Handling: Outlines common error codes and response formats for troubleshooting.
• Use Case: An MSP security analyst needs to correlate threat intelligence from Proofpoint TAP with email security events from Proofpoint Essentials. This Skill provides the foundational knowledge on how to authenticate to both APIs, understand their data models, and retrieve relevant information.

Quick Start

Use the proofpoint skill to explain how to authenticate to the TAP API using HTTP Basic Auth with a service principal and secret.