BlueCat Micetro MCP Server
Connect Runs on your machine
claude mcp add micetromcp -e MICETRO_BASE_URL=<MICETRO_BASE_URL> -e MICETRO_USERNAME=<MICETRO_USERNAME> -e MICETRO_PASSWORD=<MICETRO_PASSWORD> -e MICETRO_API_KEY=<MICETRO_API_KEY> -e MCP_AUTH_MODE=<MCP_AUTH_MODE> -e MCP_API_KEY=<MCP_API_KEY> -e MCP_ED25519_PUBLIC_KEY=<MCP_ED25519_PUBLIC_KEY> -e MCP_SIGNED_KEY_AUDIENCE=<MCP_SIGNED_KEY_AUDIENCE> -e MCP_OAUTH_ISSUER=<MCP_OAUTH_ISSUER> -e MCP_OAUTH_JWKS_URI=<MCP_OAUTH_JWKS_URI> -e MCP_OAUTH_AUDIENCE=<MCP_OAUTH_AUDIENCE> -e ACCEPT_EULA=<ACCEPT_EULA> -- docker run -i --rm quay.io/bluecat/micetromcp@sha256:04d929d2f292ca8514ba26a0cfe9178068b591ae7b5f70b93fb4807e7bed70ba
{
"mcpServers": {
"micetromcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"quay.io/bluecat/micetromcp@sha256:04d929d2f292ca8514ba26a0cfe9178068b591ae7b5f70b93fb4807e7bed70ba"
],
"env": {
"MICETRO_BASE_URL": "<MICETRO_BASE_URL>",
"MICETRO_USERNAME": "<MICETRO_USERNAME>",
"MICETRO_PASSWORD": "<MICETRO_PASSWORD>",
"MICETRO_API_KEY": "<MICETRO_API_KEY>",
"MCP_AUTH_MODE": "<MCP_AUTH_MODE>",
"MCP_API_KEY": "<MCP_API_KEY>",
"MCP_ED25519_PUBLIC_KEY": "<MCP_ED25519_PUBLIC_KEY>",
"MCP_SIGNED_KEY_AUDIENCE": "<MCP_SIGNED_KEY_AUDIENCE>",
"MCP_OAUTH_ISSUER": "<MCP_OAUTH_ISSUER>",
"MCP_OAUTH_JWKS_URI": "<MCP_OAUTH_JWKS_URI>",
"MCP_OAUTH_AUDIENCE": "<MCP_OAUTH_AUDIENCE>",
"ACCEPT_EULA": "<ACCEPT_EULA>"
}
}
}
}
{
"mcpServers": {
"micetromcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"quay.io/bluecat/micetromcp@sha256:04d929d2f292ca8514ba26a0cfe9178068b591ae7b5f70b93fb4807e7bed70ba"
],
"env": {
"MICETRO_BASE_URL": "<MICETRO_BASE_URL>",
"MICETRO_USERNAME": "<MICETRO_USERNAME>",
"MICETRO_PASSWORD": "<MICETRO_PASSWORD>",
"MICETRO_API_KEY": "<MICETRO_API_KEY>",
"MCP_AUTH_MODE": "<MCP_AUTH_MODE>",
"MCP_API_KEY": "<MCP_API_KEY>",
"MCP_ED25519_PUBLIC_KEY": "<MCP_ED25519_PUBLIC_KEY>",
"MCP_SIGNED_KEY_AUDIENCE": "<MCP_SIGNED_KEY_AUDIENCE>",
"MCP_OAUTH_ISSUER": "<MCP_OAUTH_ISSUER>",
"MCP_OAUTH_JWKS_URI": "<MCP_OAUTH_JWKS_URI>",
"MCP_OAUTH_AUDIENCE": "<MCP_OAUTH_AUDIENCE>",
"ACCEPT_EULA": "<ACCEPT_EULA>"
}
}
}
}
{
"servers": {
"micetromcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"quay.io/bluecat/micetromcp@sha256:04d929d2f292ca8514ba26a0cfe9178068b591ae7b5f70b93fb4807e7bed70ba"
],
"env": {
"MICETRO_BASE_URL": "<MICETRO_BASE_URL>",
"MICETRO_USERNAME": "<MICETRO_USERNAME>",
"MICETRO_PASSWORD": "<MICETRO_PASSWORD>",
"MICETRO_API_KEY": "<MICETRO_API_KEY>",
"MCP_AUTH_MODE": "<MCP_AUTH_MODE>",
"MCP_API_KEY": "<MCP_API_KEY>",
"MCP_ED25519_PUBLIC_KEY": "<MCP_ED25519_PUBLIC_KEY>",
"MCP_SIGNED_KEY_AUDIENCE": "<MCP_SIGNED_KEY_AUDIENCE>",
"MCP_OAUTH_ISSUER": "<MCP_OAUTH_ISSUER>",
"MCP_OAUTH_JWKS_URI": "<MCP_OAUTH_JWKS_URI>",
"MCP_OAUTH_AUDIENCE": "<MCP_OAUTH_AUDIENCE>",
"ACCEPT_EULA": "<ACCEPT_EULA>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
MICETRO_BASE_URLRequired | Micetro base URL (e.g., https://micetro.bluecat.com). |
MICETRO_USERNAMEOptional | Micetro service-account username. Required unless MICETRO_API_KEY is set — supply one of the two credential options. |
MICETRO_PASSWORDOptional, secret | Micetro service-account password. Required alongside MICETRO_USERNAME, unless MICETRO_API_KEY is used instead. |
MICETRO_API_KEYOptional, secret | Micetro API key (Micetro 26.1 and later). Alternative to MICETRO_USERNAME + MICETRO_PASSWORD; wins over the username/password pair when both are set. Every outbound request carries `authorization: Bearer <key>` and no session login is performed. |
MCP_AUTH_MODERequired | Client authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default). |
MCP_API_KEYOptional, secret | Static bearer token clients present as `Authorization: Bearer <key>`. Required only when MCP_AUTH_MODE=static-key. |
MCP_ED25519_PUBLIC_KEYOptional | Ed25519 public key that MCP_AUTH_MODE=signed-key verifies license tokens against: the one BlueCat supplies with your license tokens, as the raw 32-byte public key, base64url-encoded without padding (43 characters). Required when MCP_AUTH_MODE=signed-key — the server refuses to start in that mode wi… |
MCP_SIGNED_KEY_AUDIENCEOptional | When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key. |
MCP_OAUTH_ISSUEROptional | Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it. |
MCP_OAUTH_JWKS_URIOptional | JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it. |
MCP_OAUTH_AUDIENCEOptional | Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely. |
ACCEPT_EULARequired | Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it. |
Details
| Package | quay.io/bluecat/micetromcp@sha256:04d929d2f292ca8514ba26a0cfe9178068b591ae7b5f70b93fb4807e7bed70ba (OCI, streamable-http) |
| First published | 2 Nov 2026 |
| Last updated | 2 Nov 2026 |
| Registry name | com.bluecat/micetromcp |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
