--- bezeichner: "com.bluecat/micetromcp" art: "mcp_server" slug: "com-bluecat-micetromcp" paketkoordinate: "oci:quay.io/bluecat/micetromcp@sha256:6319226443364523115c31ad4e51b725ab5d9599af2be4ea7dc43be66f36be5d" status: "aktiv" erhebungsstand: "2026-10-11T01:17:01.851Z" namensraum: "com.bluecat" registerseite: "https://tracevero.com/mcp/com-bluecat-micetromcp" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: false ausfuehrungsort: "entfernt" dateisystem_pfadargument: false quelloffen_einsehbar: false roh_beschreibung: "BlueCat Micetro MCP Server" version: "26.1.1" roh_umgebungsvariablen: "MICETRO_BASE_URL, MICETRO_USERNAME, MICETRO_PASSWORD, MICETRO_API_KEY, MCP_AUTH_MODE, MCP_API_KEY, MCP_ED25519_PUBLIC_KEY, MCP_SIGNED_KEY_AUDIENCE, MCP_OAUTH_ISSUER, MCP_OAUTH_JWKS_URI, MCP_OAUTH_AUDIENCE, ACCEPT_EULA" roh_geheime_pflichtvariablen: "" roh_transportarten: "streamable-http" roh_pfadargumente: "" roh_repository_url: "" roh_paketquellen: "oci" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-10-01" roh_aktualisiert_am: "2026-10-01" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "" roh_repository_unterordner: "" roh_paketbezeichner: "quay.io/bluecat/micetromcp@sha256:6319226443364523115c31ad4e51b725ab5d9599af2be4ea7dc43be66f36be5d" roh_paketversionen: "" roh_laufzeithinweise: "docker" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "ACCEPT_EULA=Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it. · MCP_API_KEY=Static bearer token clients present as `Authorization: Bearer `. Required only when MCP_AUTH_MODE=static-key. · MCP_AUTH_MODE=Client authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default). · MCP_ED25519_PUBLIC_KEY=Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half. · MCP_OAUTH_AUDIENCE=Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely. · MCP_OAUTH_ISSUER=Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it. · MCP_OAUTH_JWKS_URI=JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it. · MCP_SIGNED_KEY_AUDIENCE=When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key. · MICETRO_API_KEY=Micetro API key (Micetro 26.1 and later). Alternative to MICETRO_USERNAME + MICETRO_PASSWORD; wins over the username/password pair when both are set. Every outbound request carries `authorization: Bearer ` and no session login is performed. Unlike MICETRO_USERNAME/MICETRO_PASSWORD, which are simply not used in horizon mode, MICETRO_API_KEY is rejected at startup there — cloud mode has no fixed backend identity for a key to authenticate. · MICETRO_BASE_URL=Micetro base URL (e.g., https://micetro.bluecat.com). · MICETRO_PASSWORD=Micetro service-account password. Required alongside MICETRO_USERNAME, unless MICETRO_API_KEY is used instead. · MICETRO_USERNAME=Micetro service-account username. Required in self-hosted mode (MCP_DEPLOYMENT_MODE unset or self-hosted) unless MICETRO_API_KEY is used instead — the server needs exactly one of the two credential options. Not used in horizon mode (accepted and ignored — an operator is free to leave it set)." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"oci\",\"identifier\":\"quay.io/bluecat/micetromcp@sha256:6319226443364523115c31ad4e51b725ab5d9599af2be4ea7dc43be66f36be5d\",\"runtimeHint\":\"docker\",\"transport\":\"streamable-http\",\"environment\":[{\"name\":\"MICETRO_BASE_URL\",\"description\":\"Micetro base URL (e.g., https://micetro.bluecat.com).\",\"required\":true,\"secret\":false},{\"name\":\"MICETRO_USERNAME\",\"description\":\"Micetro service-account username. Required in self-hosted mode (MCP_DEPLOYMENT_MODE unset or self-hosted) unless MICETRO_API_KEY is used instead — the server needs exactly one of the two credential options. Not used in horizon mode (accepted and ignored — an operator is free to leave it set).\",\"required\":false,\"secret\":false},{\"name\":\"MICETRO_PASSWORD\",\"description\":\"Micetro service-account password. Required alongside MICETRO_USERNAME, unless MICETRO_API_KEY is used instead.\",\"required\":false,\"secret\":true},{\"name\":\"MICETRO_API_KEY\",\"description\":\"Micetro API key (Micetro 26.1 and later). Alternative to MICETRO_USERNAME + MICETRO_PASSWORD; wins over the username/password pair when both are set. Every outbound request carries `authorization: Bearer ` and no session login is performed. Unlike MICETRO_USERNAME/MICETRO_PASSWORD, which are simply not used in horizon mode, MICETRO_API_KEY is rejected at startup there — cloud mode has no fixed backend identity for a key to authenticate.\",\"required\":false,\"secret\":true},{\"name\":\"MCP_AUTH_MODE\",\"description\":\"Client authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default).\",\"required\":true,\"secret\":false},{\"name\":\"MCP_API_KEY\",\"description\":\"Static bearer token clients present as `Authorization: Bearer `. Required only when MCP_AUTH_MODE=static-key.\",\"required\":false,\"secret\":true},{\"name\":\"MCP_ED25519_PUBLIC_KEY\",\"description\":\"Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half.\",\"required\":false,\"secret\":false},{\"name\":\"MCP_SIGNED_KEY_AUDIENCE\",\"description\":\"When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key.\",\"required\":false,\"secret\":false},{\"name\":\"MCP_OAUTH_ISSUER\",\"description\":\"Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.\",\"required\":false,\"secret\":false},{\"name\":\"MCP_OAUTH_JWKS_URI\",\"description\":\"JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.\",\"required\":false,\"secret\":false},{\"name\":\"MCP_OAUTH_AUDIENCE\",\"description\":\"Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely.\",\"required\":false,\"secret\":false},{\"name\":\"ACCEPT_EULA\",\"description\":\"Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it.\",\"required\":true,\"secret\":false}],\"additional_arguments_declared\":true}],\"remotes\":[]}" --- # com.bluecat/micetromcp ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-10-02T01:17:01.536Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | entfernt | MCP-Register | 2026-10-02T01:17:01.536Z | abgeleitet | roh_transportarten: streamable-http | | Path argument present | false | MCP-Register | 2026-10-02T01:17:01.536Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | false | MCP-Register | 2026-10-02T01:17:01.536Z | abgeleitet | roh_repository_url: | | Description (raw) | BlueCat Micetro MCP Server | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Declared version | 26.1.1 | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Environment variables (raw) | MICETRO_BASE_URL, MICETRO_USERNAME, MICETRO_PASSWORD, MICETRO_API_KEY, MCP_AUTH_MODE, MCP_API_KEY, MCP_ED25519_PUBLIC_KEY, MCP_SIGNED_KEY_AUDIENCE, MCP_OAUTH_ISSUER, MCP_OAUTH_JWKS_URI, MCP_OAUTH_AUDIENCE, ACCEPT_EULA | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Transports (raw) | streamable-http | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Repository (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Package registries (raw) | oci | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | First listed in the registry (raw) | 2026-10-01 | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-10-01 | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Repository platform (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Package identifiers (raw) | quay.io/bluecat/micetromcp@sha256:6319226443364523115c31ad4e51b725ab5d9599af2be4ea7dc43be66f36be5d | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Package versions (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Runtime hints (raw) | docker | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Environment variable formats (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Environment variable descriptions (raw) | ACCEPT_EULA=Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it. · MCP_API_KEY=Static bearer token clients present as `Authorization: Bearer `. Required only when MCP_AUTH_MODE=static-key. · MCP_AUTH_MODE=Client authentication mode for the /mcp endpoint. One of: none \| static-key \| signed-key \| resource-server. Required at runtime — the server refuses to start without it (no default). · MCP_ED25519_PUBLIC_KEY=Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half. · MCP_OAUTH_AUDIENCE=Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely. · MCP_OAUTH_ISSUER=Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it. · MCP_OAUTH_JWKS_URI=JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it. · MCP_SIGNED_KEY_AUDIENCE=When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key. · MICETRO_API_KEY=Micetro API key (Micetro 26.1 and later). Alternative to MICETRO_USERNAME + MICETRO_PASSWORD; wins over the username/password pair when both are set. Every outbound request carries `authorization: Bearer ` and no session login is performed. Unlike MICETRO_USERNAME/MICETRO_PASSWORD, which are simply not used in horizon mode, MICETRO_API_KEY is rejected at startup there — cloud mode has no fixed backend identity for a key to authenticate. · MICETRO_BASE_URL=Micetro base URL (e.g., https://micetro.bluecat.com). · MICETRO_PASSWORD=Micetro service-account password. Required alongside MICETRO_USERNAME, unless MICETRO_API_KEY is used instead. · MICETRO_USERNAME=Micetro service-account username. Required in self-hosted mode (MCP_DEPLOYMENT_MODE unset or self-hosted) unless MICETRO_API_KEY is used instead — the server needs exactly one of the two credential options. Not used in horizon mode (accepted and ignored — an operator is free to leave it set). | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"oci","identifier":"quay.io/bluecat/micetromcp@sha256:6319226443364523115c31ad4e51b725ab5d9599af2be4ea7dc43be66f36be5d","runtimeHint":"docker","transport":"streamable-http","environment":[{"name":"MICETRO_BASE_URL","description":"Micetro base URL (e.g., https://micetro.bluecat.com).","required":true,"secret":false},{"name":"MICETRO_USERNAME","description":"Micetro service-account username. Required in self-hosted mode (MCP_DEPLOYMENT_MODE unset or self-hosted) unless MICETRO_API_KEY is used instead — the server needs exactly one of the two credential options. Not used in horizon mode (accepted and ignored — an operator is free to leave it set).","required":false,"secret":false},{"name":"MICETRO_PASSWORD","description":"Micetro service-account password. Required alongside MICETRO_USERNAME, unless MICETRO_API_KEY is used instead.","required":false,"secret":true},{"name":"MICETRO_API_KEY","description":"Micetro API key (Micetro 26.1 and later). Alternative to MICETRO_USERNAME + MICETRO_PASSWORD; wins over the username/password pair when both are set. Every outbound request carries `authorization: Bearer ` and no session login is performed. Unlike MICETRO_USERNAME/MICETRO_PASSWORD, which are simply not used in horizon mode, MICETRO_API_KEY is rejected at startup there — cloud mode has no fixed backend identity for a key to authenticate.","required":false,"secret":true},{"name":"MCP_AUTH_MODE","description":"Client authentication mode for the /mcp endpoint. One of: none \| static-key \| signed-key \| resource-server. Required at runtime — the server refuses to start without it (no default).","required":true,"secret":false},{"name":"MCP_API_KEY","description":"Static bearer token clients present as `Authorization: Bearer `. Required only when MCP_AUTH_MODE=static-key.","required":false,"secret":true},{"name":"MCP_ED25519_PUBLIC_KEY","description":"Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half.","required":false,"secret":false},{"name":"MCP_SIGNED_KEY_AUDIENCE","description":"When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key.","required":false,"secret":false},{"name":"MCP_OAUTH_ISSUER","description":"Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.","required":false,"secret":false},{"name":"MCP_OAUTH_JWKS_URI","description":"JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.","required":false,"secret":false},{"name":"MCP_OAUTH_AUDIENCE","description":"Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely.","required":false,"secret":false},{"name":"ACCEPT_EULA","description":"Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it.","required":true,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} | MCP-Register | 2026-10-02T01:17:01.536Z | selbstauskunft | | ## Links - Namespace: [[namensraum/com-bluecat|com.bluecat]] --- - Registry page: - Retrieved on: 2026-10-11