How to Chat with Your Check Point Gateways Using Claude Desktop ?

[nareshk]

Originally posted on Medium 

Security teams today need to move faster, prove compliance, and investigate issues across increasingly complex environments — all while working with limited resources.

To help address these challenges, Check Point introduced a suite of model context protocol (MCP) servers for Check Point APIs — a new way to securely connect AI models to your security infrastructure using natural language.

These servers transform Check Point’s robust APIs into specialized interfaces that can be seamlessly integrated with any AI ecosystem, enabling administrators to query their Check Point infrastructure using natural language.

What Are MCP Servers?

MCP servers provide access to Check Point’s APIs using familiar large language model tools. This allows these tools to perform real-time, natural-language queries without writing custom scripts or handling raw API responses.

MCP servers can be used as tools on platforms like Claude Desktop or can be integrated into your internal copilots and automation frameworks.

For example, a user could ask in Claude Desktop and get the response in Chat:
“Is my security policy compliant with PCI-DSS?”

Reference : https://blog.checkpoint.com/securing-the-network/introducing-check-point-mcp-servers-integrate-check...

Please use the below Git Link to download.

https://github.com/CheckPointSW/mcp-servers?source=post_page-----af49f6d7ff67-----------------------...

Today lets see how to install the MCP and query using AI tools like Claude Desktop, Cursor AI, Windsurf etc… I installed this in my Windows Machine using Claude Desktop.

Steps to Follow

1. MCP Server Configuration

Install node.js on your system and verify the installation ( nodejs.org)

2. Verify your installation from powershell

Press enter or click to view image in full size

3. Create Project Directory

mkdir checkpoint-mcp

4. Install Check Point MCP Server

npm init -y

npm install @chkp/quantum-management-mcp

5. Test API Connection — Create test file test-connection.js and node test-connection.js

// Test Check Point API connection
const https = require(‘https’);

const testConnection = async () => {
const postData = JSON.stringify({
“user”: “YOUR_USERNAME”,
“password”: “YOUR_PASSWORD”
});

const options = {
hostname: ‘YOUR_CHECKPOINT_IP’,
port: 443,
path: ‘/web_api/login’,
method: ‘POST’,
headers: {
‘Content-Type’: ‘application/json’,
‘Content-Length’: postData.length
},
rejectUnauthorized: false
};

return new Promise((resolve, reject) => {
const req = https.request(options, (res) => {
let data = ‘’;
res.on(‘data’, (chunk) => data += chunk);
res.on(‘end’, () => {
console.log(‘Response:’, data);
resolve(data);
});
});

req.on(‘error’, (e) => {
console.error(‘Error:’, e);
reject(e);
});

req.write(postData);
req.end();
});
};

testConnection();

When you execute script to test connect you should see the output as below.

6. Create MCP Server startup script ( C:\checkpoint-mcp\start-mcp.bat:)-Test the batch file after creation

@echo off
set MANAGEMENT_HOST=YOUR_CHECKPOINT_IP
set USERNAME=YOUR_USERNAME
set PASSWORD=YOUR_PASSWORD
set MANAGEMENT_PORT=443
cd C:\checkpoint-mcp
node node_modules\@chkp\quantum-management-mcp\dist\index.js

Expected output as below — Ensuring your MCP Server is running . Test it by running the batch file.

7. Final Step is to configure Claude Desktop or Cursor AI or Windsurf. In my lab i have used Claude Desktop

After you install Claude Desktop in your system, find the config file by running this command from Powershell

$configPath = “$env:APPDATA\Claude\claude_desktop_config.json”
echo “Config file location: $configPath”

notepad $configPath

Press enter or click to view image in full size

Edit the Claude Desktop Config File — Add this Configuration

{
“mcpServers”: {
“checkpoint-management”: {
“command”: “C:\\checkpoint-mcp\\start-mcp.bat”
}
}
}

Restart Claude Desktop. Close Claude Desktop completely from Task Manager and re-launch it.

Your setup is ready and you can query your Check Point Gateways using Claude Desktop.

Press enter or click to view image in full size

Please ensure you have enabled API Access to your smart management server or smart-1 cloud. Also ensure you have the right format for the codes copied above. Steps can be followed using the below link

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_SmartProvisioning_AdminGuide/Conte...

[the_rock]

I may try that : - )

[_Val_]

Fantastic, thanks for sharing!

[PhoneBoy]

Thanks for sharing this!

[the_rock]

Tested this today, so cool!