Micetromcp MCP Server

BlueCat Micetro MCP Server

Local serverstreamable-http

What is the Micetromcp MCP Server?

Micetromcp is an MCP integration. BlueCat Micetro MCP Server.

Packages and local setup

The published oci package is quay.io/bluecat/micetromcp@sha256:6319226443364523115c31ad4e51b725ab5d9599af2be4ea7dc43be66f36be5d. Its declared MCP transport is streamable-http.

The package declares MICETRO_BASE_URL (required): Micetro base URL (e.g., https://micetro.bluecat.com).; MICETRO_USERNAME: Micetro service-account username. Required in self-hosted mode (MCP_DEPLOYMENT_MODE unset or self-hosted) unless MICETRO_API_KEY is used instead — the server needs exactly one of the two credential options. Not used in horizon mode (accepted and ignored — an operator is free to leave it set).; MICETRO_PASSWORD: Micetro service-account password. Required alongside MICETRO_USERNAME, unless MICETRO_API_KEY is used instead.; MICETRO_API_KEY: Micetro API key (Micetro 26.1 and later). Alternative to MICETRO_USERNAME + MICETRO_PASSWORD; wins over the username/password pair when both are set. Every outbound request carries authorization: Bearer and no session login is performed. Unlike MICETRO_USERNAME/MICETRO_PASSWORD, which are simply not used in horizon mode, MICETRO_API_KEY is rejected at startup there — cloud mode has no fixed backend identity for a key to authenticate.; MCP_AUTH_MODE (required): Client authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default).; MCP_API_KEY: Static bearer token clients present as Authorization: Bearer . Required only when MCP_AUTH_MODE=static-key.; MCP_ED25519_PUBLIC_KEY: Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half.; MCP_SIGNED_KEY_AUDIENCE: When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key.; MCP_OAUTH_ISSUER: Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.; MCP_OAUTH_JWKS_URI: JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.; MCP_OAUTH_AUDIENCE: Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely.; ACCEPT_EULA (required): Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it..

This package has launch arguments in its registry record. Use the maintainer’s configuration for those arguments rather than launching it with only the package name.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry. This profile uses version 26.1.1 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
MICETRO_BASE_URLMicetro base URL (e.g., https://micetro.bluecat.com).Yes
MICETRO_USERNAMEMicetro service-account username. Required in self-hosted mode (MCP_DEPLOYMENT_MODE unset or self-hosted) unless MICETRO_API_KEY is used instead — the server needs exactly one of the two credential options. Not used in horizon mode (accepted and ignored — an operator is free to leave it set).Optional
MICETRO_PASSWORDMicetro service-account password. Required alongside MICETRO_USERNAME, unless MICETRO_API_KEY is used instead.Optional
MICETRO_API_KEYMicetro API key (Micetro 26.1 and later). Alternative to MICETRO_USERNAME + MICETRO_PASSWORD; wins over the username/password pair when both are set. Every outbound request carries authorization: Bearer and no session login is performed. Unlike MICETRO_USERNAME/MICETRO_PASSWORD, which are simply not used in horizon mode, MICETRO_API_KEY is rejected at startup there — cloud mode has no fixed backend identity for a key to authenticate.Optional
MCP_AUTH_MODEClient authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default).Yes
MCP_API_KEYStatic bearer token clients present as Authorization: Bearer . Required only when MCP_AUTH_MODE=static-key.Optional
MCP_ED25519_PUBLIC_KEYEd25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half.Optional
MCP_SIGNED_KEY_AUDIENCEWhen set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key.Optional
MCP_OAUTH_ISSUERToken issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.Optional
MCP_OAUTH_JWKS_URIJWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.Optional
MCP_OAUTH_AUDIENCEExpected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely.Optional
ACCEPT_EULASet to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it.Yes