RocketCyber MCP Server: Install & Setup

Install RocketCyber in Claude Code

Claude Code

claude mcp add wyre-technology-rocketcyber -e ROCKETCYBER_API_KEY=... -e ROCKETCYBER_CUSTOMER_ID=... -- docker run -i --rm -e ROCKETCYBER_API_KEY -e ROCKETCYBER_CUSTOMER_ID ghcr.io/wyre-technology/rocketcyber-mcp:v1.5.4

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "wyre-technology-rocketcyber": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "ROCKETCYBER_API_KEY",
        "-e",
        "ROCKETCYBER_CUSTOMER_ID",
        "ghcr.io/wyre-technology/rocketcyber-mcp:v1.5.4"
      ],
      "env": {
        "ROCKETCYBER_API_KEY": "...",
        "ROCKETCYBER_CUSTOMER_ID": "..."
      }
    }
  }
}

Replace each ... with your own value.

Frequently asked questions

What does the RocketCyber MCP server do?

MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.

Is the RocketCyber MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does RocketCyber run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add RocketCyber to Claude Code?

Run: claude mcp add wyre-technology-rocketcyber -e ROCKETCYBER_API_KEY=... -e ROCKETCYBER_CUSTOMER_ID=... -- docker run -i --rm -e ROCKETCYBER_API_KEY -e ROCKETCYBER_CUSTOMER_ID ghcr.io/wyre-technology/rocketcyber-mcp:v1.5.4

More monitoring & observability MCP servers

View all

Rootly

WYRE-AI/rootly-mcp

MCP server for Rootly — incidents, alerts, escalations, and post-incident reports.

LocalAccount needed

RocketCyber

WYRE-AI/rocketcyber-mcp

MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.

LocalAccount needed

Rootly

wyre-technology/rootly-mcp

MCP server for Rootly — incidents, alerts, escalations, and post-incident reports.

LocalAccount needed

RoastPilot

syamaner/coffee-roaster-mcp

RoastPilot controls coffee roasting sessions through local stdio MCP tools and exports logs.

LocalFree

SaaS Alerts

WYRE-AI/saas-alerts-mcp

MCP server for Kaseya SaaS Alerts — SaaS security monitoring for M365 & Google Workspace.

LocalAccount needed

Reportcraft

rharper105/reportcraft

Generate Splunk dashboards, reports, and alerts from natural language. No API key required.

LocalFree