RocketCyber MCP Server

io.github.WYRE-AI/rocketcyber-mcp

Repository Registry

What is the RocketCyber MCP server?

MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.

How to install RocketCyber

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

ROCKETCYBER_API_KEY
required
secret
RocketCyber API key for authenticating to the Managed SOC API
ROCKETCYBER_CUSTOMER_ID
required
RocketCyber customer (tenant) identifier
ROCKETCYBER_API_URL
RocketCyber API base URL — override only if using a non-default region
MCP_TRANSPORT
Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODE
Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVEL
Log verbosity: debug, info, warn, error

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "rocketcyber-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/rocketcyber-mcp:v1.5.7"
      ],
      "env": {
        "ROCKETCYBER_API_KEY": "<YOUR_ROCKETCYBER_API_KEY>",
        "ROCKETCYBER_CUSTOMER_ID": "<YOUR_ROCKETCYBER_CUSTOMER_ID>",
        "ROCKETCYBER_API_URL": "<YOUR_ROCKETCYBER_API_URL>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}

Related MCP servers

Rootly

Active

MCP server for Rootly — incidents, alerts, escalations, and post-incident reports.

TypeScript

View repository →

SaaS Alerts

MCP server for Kaseya SaaS Alerts — SaaS security monitoring for M365 & Google Workspace.

View repository →

SalesBuildr

Active

MCP server for SalesBuildr — quoting and sales workflows for MSPs.

TypeScript

Apache-2.0

View repository →

Salesforce

Active

MCP server for Salesforce CRM — Accounts, Contacts, Opportunities, Leads, Cases.

TypeScript

View repository →

ScalePad

Active

MCP server for ScalePad — Core, Lifecycle Manager, ControlMap, Backup Radar, and Quoter.

TypeScript

Apache-2.0

View repository →

SentinelOne (Purple)

Multitenant Streamable HTTP wrapper for the SentinelOne purple-mcp server.

View repository →