MCP Server

com.bluecat/livewiremcp MCP Server

com.bluecat/livewiremcp

Registry

What is the com.bluecat/livewiremcp MCP server?

LiveAction LiveWire MCP Server

How to install com.bluecat/livewiremcp

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

LIVEWIRE_BASE_URL
required
LiveWire base URL (e.g., https://livewire.example.com).
LIVEWIRE_API_KEY
required
secret
LiveWire API key. Mint a managed durable token (POST /api/v1/tokens/) rather than a /login session token — see --help for the full procedure.
MCP_AUTH_MODE
required
Client authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default).
MCP_API_KEY
secret
Static bearer token clients present as `Authorization: Bearer <key>`. Required only when MCP_AUTH_MODE=static-key.
MCP_ED25519_PUBLIC_KEY
Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half.
MCP_SIGNED_KEY_AUDIENCE
When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key.
MCP_OAUTH_ISSUER
Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.
MCP_OAUTH_JWKS_URI
JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.
MCP_OAUTH_AUDIENCE
Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely.
ACCEPT_EULA
required
Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it.

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "livewiremcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "quay.io/bluecat/livewiremcp@sha256:c1614cbe6bca212d0287c5fdfafc09b83579b38eb7e5f9b1fc4011902d41d385",
        "-p",
        "9997:9997"
      ],
      "env": {
        "LIVEWIRE_BASE_URL": "<YOUR_LIVEWIRE_BASE_URL>",
        "LIVEWIRE_API_KEY": "<YOUR_LIVEWIRE_API_KEY>",
        "MCP_AUTH_MODE": "<YOUR_MCP_AUTH_MODE>",
        "MCP_API_KEY": "<YOUR_MCP_API_KEY>",
        "MCP_ED25519_PUBLIC_KEY": "<YOUR_MCP_ED25519_PUBLIC_KEY>",
        "MCP_SIGNED_KEY_AUDIENCE": "<YOUR_MCP_SIGNED_KEY_AUDIENCE>",
        "MCP_OAUTH_ISSUER": "<YOUR_MCP_OAUTH_ISSUER>",
        "MCP_OAUTH_JWKS_URI": "<YOUR_MCP_OAUTH_JWKS_URI>",
        "MCP_OAUTH_AUDIENCE": "<YOUR_MCP_OAUTH_AUDIENCE>",
        "ACCEPT_EULA": "<YOUR_ACCEPT_EULA>"
      }
    }
  }
}