RocketCyber

Overview

RocketCyber is an MCP server that connects your AI assistant to RocketCyber Managed SOC, giving you direct access to incidents, alerts, agents, and customer telemetry through callable tools. Instead of switching between applications, your AI can query and interact with your security operations data in real time.

The server runs locally via Docker using the image ghcr.io/wyre-ai/rocketcyber-mcp:v1.5.6 and communicates over stdio. You'll need to provide your ROCKETCYBER_API_KEY and ROCKETCYBER_CUSTOMER_ID as environment variables to authenticate. The latest release is v1.5.6, published under the Apache-2.0 license with source code available at WYRE-AI/rocketcyber-mcp on GitHub.

RocketCyber is listed in the AI & Agents category on mcp.site and works with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain this server, claim your listing to earn a Verified badge and keep the information up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "rocketcyber": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/wyre-ai/rocketcyber-mcp:v1.5.6"
      ],
      "env": {
        "ROCKETCYBER_API_KEY": "<rocketcyber-api-key>",
        "ROCKETCYBER_CUSTOMER_ID": "<rocketcyber-customer-id>"
      }
    }
  }
}

Requires ROCKETCYBER_API_KEY, ROCKETCYBER_CUSTOMER_ID