{
  "markdown": "# rocketcyber-mcp\n\nMCP (Model Context Protocol) server for the [RocketCyber](https://www.rocketcyber.com/) Managed SOC platform. Provides read-only access to RocketCyber security data through 10 tools and 3 resources.\n\n## Features\n\n- 10 read-only tools covering all RocketCyber API resources\n- 3 MCP resources for quick data access\n- Dual transport: stdio (default) and HTTP Streamable\n- Lazy SDK initialization on first tool call\n- Winston logger with all output routed to stderr\n- Connection test tool for validating credentials\n\n## One-Click Deployment\n\n> [!IMPORTANT]\n> **Before you click:** this server depends on `@wyre-technology/node-rocketcyber`,\n> which is hosted on the **GitHub Packages** npm registry. GitHub Packages has no\n> anonymous access — even though the package is public, every `npm install` needs a\n> token. The cloud builder runs `npm install` for you, so you must give it one, or\n> the build fails with `npm error 401 Unauthorized ... npm.pkg.github.com`.\n>\n> 1. Create a GitHub **Personal Access Token** with the `read:packages` scope\n>    ([classic token](https://github.com/settings/tokens/new?scopes=read:packages&description=rocketcyber-mcp%20deploy)).\n>    Any GitHub account works — you do **not** need to be a member of the\n>    `wyre-technology` org to read its public packages.\n> 2. Add it as a build variable when prompted by the deploy flow:\n>    - **Cloudflare Workers** → set a build variable named **`NODE_AUTH_TOKEN`** to your PAT\n>      (Workers → Settings → Build → Variables and Secrets).\n>    - **DigitalOcean App Platform** → set an encrypted env var named **`GITHUB_TOKEN`**\n>      with scope **Build Time** to your PAT (the Dockerfile reads it for the install).\n\n[![Deploy to DO](https://www.deploytodo.com/do-btn-blue.svg)](https://cloud.digitalocean.com/apps/new?repo=https://github.com/WYRE-AI/rocketcyber-mcp/tree/main)\n\n[![Deploy to Cloudflare Workers](https://deploy.workers.cloudflare.com/button)](https://deploy.workers.cloudflare.com/?url=https://github.com/WYRE-AI/rocketcyber-mcp)\n\n## Installation\n\nThis project depends on `@wyre-technology/node-rocketcyber`, published to the\n**GitHub Packages** npm registry, which requires a token even for public packages.\nAuthenticate once, then install:\n\n```bash\n# Authenticate npm to GitHub Packages (token needs the read:packages scope)\nexport NODE_AUTH_TOKEN=$(gh auth token)   # or a PAT with read:packages\n\nnpm install\nnpm run build\n```\n\nThe repo's `.npmrc` already points the `@wyre-technology` scope at GitHub Packages and\nreads the token from `NODE_AUTH_TOKEN`, so no further config is needed.\n\n## Configuration\n\n| Environment Variable | Required | Default | Description |\n|---|---|---|---|\n| `ROCKETCYBER_API_KEY` | Yes | - | RocketCyber API key |\n| `ROCKETCYBER_REGION` | No | `us` | API region: `us` or `eu` |\n| `MCP_TRANSPORT` | No | `stdio` | Transport type: `stdio` or `http` |\n| `MCP_HTTP_PORT` | No | `8080` | HTTP port (when using http transport) |\n| `MCP_HTTP_HOST` | No | `0.0.0.0` | HTTP host (when using http transport) |\n| `LOG_LEVEL` | No | `info` | Log level: `error`, `warn`, `info`, `debug` |\n| `LOG_FORMAT` | No | `simple` | Log format: `json` or `simple` |\n\n## Usage\n\n### Claude Desktop (stdio)\n\nAdd to your Claude Desktop configuration (`claude_desktop_config.json`):\n\n```json\n{\n  \"mcpServers\": {\n    \"rocketcyber\": {\n      \"command\": \"node\",\n      \"args\": [\"/path/to/rocketcyber-mcp/dist/entry.js\"],\n      \"env\": {\n        \"ROCKETCYBER_API_KEY\": \"your-api-key\"\n      }\n    }\n  }\n}\n```\n\n### HTTP Transport\n\n```bash\nROCKETCYBER_API_KEY=your-api-key MCP_TRANSPORT=http npm start\n```\n\n## Tools\n\n| Tool | Description |\n|---|---|\n| `rocketcyber_test_connection` | Test the connection to RocketCyber API |\n| `rocketcyber_get_account` | Get account information |\n| `rocketcyber_list_agents` | List monitored agents/endpoints |\n| `rocketcyber_list_incidents` | List security incidents |\n| `rocketcyber_list_events` | List security events |\n| `rocketcyber_get_event_summary` | Get event summary/statistics |\n| `rocketcyber_list_firewalls` | List firewall devices |\n| `rocketcyber_list_apps` | List managed apps |\n| `rocketcyber_get_defender` | Get Windows Defender status |\n| `rocketcyber_get_office` | Get Office 365 status |\n\n## Resources\n\n| URI | Description |\n|---|---|\n| `rocketcyber://account` | Account information |\n| `rocketcyber://incidents` | Security incidents |\n| `rocketcyber://agents` | Monitored agents/endpoints |\n\n## Development\n\n```bash\n# Install dependencies\nnpm install\n\n# Run in development mode\nnpm run dev\n\n# Build\nnpm run build\n\n# Start production server\nnpm start\n```\n\n## License\n\n[Apache-2.0](LICENSE)\n",
  "bytes": 4647,
  "sha": "4449a101232bdc5d36d1b976e130a0bef1a7b142412aa59ae444d8c80d2ed744",
  "repo_slug": "wyre-ai/rocketcyber-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_wyre_ai_rocketcyber_mcp_7d11247b/readme"
}