Claude commands

Consolidated view of one Clio matter — contacts, open tasks, recent activities, recent communications, and bills

Log a time entry (billable activity) against a Clio matter

Quick health snapshot for a single tenant — BPA failures, conditional access enforcement, MFA gaps, domain authentication, standards compliance

Find tenants that have drifted from the MSP's configured CIPP standards baseline — missing standards, standards in Report-only mode, recent compliance failures

Generate a portfolio-wide M365 security posture report — Secure Score equivalents, MFA enrollment, conditional access coverage, and domain authentication across all managed tenants

Run the complete CIPP M365 offboarding workflow for a departing user — capture audit state, revoke access, handle mailbox, reclaim licenses

Overall security posture review including open findings by severity, agent coverage, and trends

Resolve a Blumira finding with the appropriate resolution type and notes

MSP dashboard showing all managed accounts with open finding counts and severity breakdown

Deep investigation of a specific Blumira finding with details, context, and comment history

Triage open Blumira findings by severity, presenting a prioritized list for review

List all devices and agents across the organization with status and health information

Sweep and prioritize the open Blackpoint Cyber / CompassOne detection queue across tenants

Build a prioritized exposure report for a Blackpoint Cyber / CompassOne tenant

List recent Blackpoint Cyber detections for a tenant

Portfolio-level Blackpoint Cyber / CompassOne rollup of detections and exposure across all tenants

Investigate a single Blackpoint Cyber / CompassOne detection end-to-end

Update a Better Stack status page with current status or maintenance

Search logs via Better Stack Logtail

Check all Better Stack monitor statuses and identify downtime

Triage current Better Stack incidents

Create a new Better Stack uptime monitor

Retention and RPO compliance audit against contracted requirements, for one client or the whole portfolio

Restore-readiness check - has this actually been restore-tested, for one client or the whole portfolio