PluginBench
MCP Server

RocketCyber MCP Server

io.github.wyre-technology/rocketcyber-mcp

RepositoryRegistry

What is the RocketCyber MCP server?

MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.

How to install RocketCyber

Copy-paste configuration for popular MCP clients.

transport: stdio
Config generated by PluginBench — verify against the source before use.
Environment / auth
  • ROCKETCYBER_API_KEY
    required
    secret

    RocketCyber API key for authenticating to the Managed SOC API

  • ROCKETCYBER_CUSTOMER_ID
    required

    RocketCyber customer (tenant) identifier

  • ROCKETCYBER_API_URL

    RocketCyber API base URL — override only if using a non-default region

  • MCP_TRANSPORT

    Transport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.

  • AUTH_MODE

    Credential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.

  • LOG_LEVEL

    Log verbosity: debug, info, warn, error

Claude Desktop
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "rocketcyber-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/rocketcyber-mcp:v1.3.2"
      ],
      "env": {
        "ROCKETCYBER_API_KEY": "<YOUR_ROCKETCYBER_API_KEY>",
        "ROCKETCYBER_CUSTOMER_ID": "<YOUR_ROCKETCYBER_CUSTOMER_ID>",
        "ROCKETCYBER_API_URL": "<YOUR_ROCKETCYBER_API_URL>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
Cursor
~/.cursor/mcp.json
{
  "mcpServers": {
    "rocketcyber-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/rocketcyber-mcp:v1.3.2"
      ],
      "env": {
        "ROCKETCYBER_API_KEY": "<YOUR_ROCKETCYBER_API_KEY>",
        "ROCKETCYBER_CUSTOMER_ID": "<YOUR_ROCKETCYBER_CUSTOMER_ID>",
        "ROCKETCYBER_API_URL": "<YOUR_ROCKETCYBER_API_URL>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
Windsurf
~/.codeium/windsurf/mcp_config.json
{
  "mcpServers": {
    "rocketcyber-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/rocketcyber-mcp:v1.3.2"
      ],
      "env": {
        "ROCKETCYBER_API_KEY": "<YOUR_ROCKETCYBER_API_KEY>",
        "ROCKETCYBER_CUSTOMER_ID": "<YOUR_ROCKETCYBER_CUSTOMER_ID>",
        "ROCKETCYBER_API_URL": "<YOUR_ROCKETCYBER_API_URL>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
VS Code
.vscode/mcp.json
{
  "servers": {
    "rocketcyber-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-technology/rocketcyber-mcp:v1.3.2"
      ],
      "env": {
        "ROCKETCYBER_API_KEY": "<YOUR_ROCKETCYBER_API_KEY>",
        "ROCKETCYBER_CUSTOMER_ID": "<YOUR_ROCKETCYBER_CUSTOMER_ID>",
        "ROCKETCYBER_API_URL": "<YOUR_ROCKETCYBER_API_URL>",
        "MCP_TRANSPORT": "<YOUR_MCP_TRANSPORT>",
        "AUTH_MODE": "<YOUR_AUTH_MODE>",
        "LOG_LEVEL": "<YOUR_LOG_LEVEL>"
      }
    }
  }
}
Claude Code
claude mcp add rocketcyber-mcp --env ROCKETCYBER_API_KEY=<YOUR_ROCKETCYBER_API_KEY> --env ROCKETCYBER_CUSTOMER_ID=<YOUR_ROCKETCYBER_CUSTOMER_ID> --env ROCKETCYBER_API_URL=<YOUR_ROCKETCYBER_API_URL> --env MCP_TRANSPORT=<YOUR_MCP_TRANSPORT> --env AUTH_MODE=<YOUR_AUTH_MODE> --env LOG_LEVEL=<YOUR_LOG_LEVEL> -- docker run -i --rm ghcr.io/wyre-technology/rocketcyber-mcp:v1.3.2

Related MCP servers

Abnormal Security

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

View repository →

Action1

Action1 MCP server — endpoint inventory, patch visibility, and policy automation via REST API.

View repository →

Alternative Payments

MCP server for Alternative Payments — customers, invoices, payment requests, payouts, webhooks.

View repository →

Atera

MCP server for Atera RMM — customers, tickets, and more.

View repository →

Autotask

MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.

View repository →

Auvik

MCP server for the Auvik network monitoring API — devices, alerts, statistics, billing.

View repository →