{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"com.bluecat/livewiremcp","description":"LiveAction LiveWire MCP Server","version":"26.2.2","packages":[{"registryType":"oci","identifier":"quay.io/bluecat/livewiremcp@sha256:c1614cbe6bca212d0287c5fdfafc09b83579b38eb7e5f9b1fc4011902d41d385","runtimeHint":"docker","transport":{"type":"streamable-http","url":"http://localhost:9997/mcp"},"runtimeArguments":[{"isRequired":true,"value":"9997:9997","type":"named","name":"-p"}],"environmentVariables":[{"description":"LiveWire base URL (e.g., https://livewire.example.com).","isRequired":true,"name":"LIVEWIRE_BASE_URL"},{"description":"LiveWire API key. Mint a managed durable token (POST /api/v1/tokens/) rather than a /login session token — see --help for the full procedure.","isRequired":true,"isSecret":true,"name":"LIVEWIRE_API_KEY"},{"description":"Client authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default).","isRequired":true,"name":"MCP_AUTH_MODE"},{"description":"Static bearer token clients present as `Authorization: Bearer <key>`. Required only when MCP_AUTH_MODE=static-key.","isSecret":true,"name":"MCP_API_KEY"},{"description":"Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half.","name":"MCP_ED25519_PUBLIC_KEY"},{"description":"When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key.","name":"MCP_SIGNED_KEY_AUDIENCE"},{"description":"Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.","name":"MCP_OAUTH_ISSUER"},{"description":"JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.","name":"MCP_OAUTH_JWKS_URI"},{"description":"Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely.","name":"MCP_OAUTH_AUDIENCE"},{"description":"Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it.","isRequired":true,"name":"ACCEPT_EULA"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-09-24T20:29:03.921359Z","publishedAt":"2026-09-24T20:29:03.921359Z","updatedAt":"2026-09-24T20:29:03.921359Z","isLatest":true}}}