TacticalRMM MCP Server

io.github.shin2344234/trmm-mcp

Repository Registry

What is the TacticalRMM MCP server?

Read your TacticalRMM fleet; run commands only after per-command human approval.

How to install TacticalRMM

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

TRMM_API_URL
required
Base URL of your TacticalRMM backend, e.g. https://api.example.com
TRMM_READONLY_API_KEY
required
secret
TacticalRMM API key bound to a read-only role. Used for all reads.
TRMM_COMMAND_API_KEY
secret
TacticalRMM API key permitted to execute. Only needed for elevate or command mode, and only used after an approval is granted.
TRMM_MCP_MODE
readonly (default, 20 read tools), elevate (adds 8 execution tools, each requiring out-of-band human approval), or command (execution with no gate).

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "trmm-mcp": {
      "command": "uvx",
      "args": [
        "trmm-mcp"
      ],
      "env": {
        "TRMM_API_URL": "<YOUR_TRMM_API_URL>",
        "TRMM_READONLY_API_KEY": "<YOUR_TRMM_READONLY_API_KEY>",
        "TRMM_COMMAND_API_KEY": "<YOUR_TRMM_COMMAND_API_KEY>",
        "TRMM_MCP_MODE": "<YOUR_TRMM_MCP_MODE>"
      }
    }
  }
}