com.bluecat/livewiremcp

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-09-24T20:29:03.921359Z",
      "publishedAt": "2026-09-24T20:29:03.921359Z",
      "statusChangedAt": "2026-09-24T20:29:03.921359Z"
    }
  },
  "server": {
    "name": "com.bluecat/livewiremcp",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "26.2.2",
    "packages": [
      {
        "transport": {
          "url": "http://localhost:9997/mcp",
          "type": "streamable-http"
        },
        "identifier": "quay.io/bluecat/livewiremcp@sha256:c1614cbe6bca212d0287c5fdfafc09b83579b38eb7e5f9b1fc4011902d41d385",
        "runtimeHint": "docker",
        "registryType": "oci",
        "runtimeArguments": [
          {
            "name": "-p",
            "type": "named",
            "value": "9997:9997",
            "isRequired": true
          }
        ],
        "environmentVariables": [
          {
            "name": "LIVEWIRE_BASE_URL",
            "isRequired": true,
            "description": "LiveWire base URL (e.g., https://livewire.example.com)."
          },
          {
            "name": "LIVEWIRE_API_KEY",
            "isSecret": true,
            "isRequired": true,
            "description": "LiveWire API key. Mint a managed durable token (POST /api/v1/tokens/) rather than a /login session token — see --help for the full procedure."
          },
          {
            "name": "MCP_AUTH_MODE",
            "isRequired": true,
            "description": "Client authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default)."
          },
          {
            "name": "MCP_API_KEY",
            "isSecret": true,
            "description": "Static bearer token clients present as `Authorization: Bearer <key>`. Required only when MCP_AUTH_MODE=static-key."
          },
          {
            "name": "MCP_ED25519_PUBLIC_KEY",
            "description": "Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half."
          },
          {
            "name": "MCP_SIGNED_KEY_AUDIENCE",
            "description": "When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key."
          },
          {
            "name": "MCP_OAUTH_ISSUER",
            "description": "Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it."
          },
          {
            "name": "MCP_OAUTH_JWKS_URI",
            "description": "JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it."
          },
          {
            "name": "MCP_OAUTH_AUDIENCE",
            "description": "Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely."
          },
          {
            "name": "ACCEPT_EULA",
            "isRequired": true,
            "description": "Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it."
          }
        ]
      }
    ],
    "description": "LiveAction LiveWire MCP Server"
  }
}