livewiremcp

Name: livewiremcp
Author: bluecat.com

本地服务

@bluecat.com云与基础设施

关于 livewiremcp

LiveAction LiveWire MCP 服务

配置

本地服务的配置在各客户端中通用，复制后粘贴到客户端的 MCP 配置文件即可。

mcp.json · 通用配置

{
  "mcpServers": {
    "com-bluecat-livewiremcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "LIVEWIRE_BASE_URL",
        "-e",
        "LIVEWIRE_API_KEY",
        "-e",
        "MCP_AUTH_MODE",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_ED25519_PUBLIC_KEY",
        "-e",
        "MCP_SIGNED_KEY_AUDIENCE",
        "-e",
        "MCP_OAUTH_ISSUER",
        "-e",
        "MCP_OAUTH_JWKS_URI",
        "-e",
        "MCP_OAUTH_AUDIENCE",
        "-e",
        "ACCEPT_EULA",
        "quay.io/bluecat/livewiremcp@sha256:c1614cbe6bca212d0287c5fdfafc09b83579b38eb7e5f9b1fc4011902d41d385"
      ],
      "env": {
        "LIVEWIRE_BASE_URL": "<LIVEWIRE_BASE_URL>",
        "LIVEWIRE_API_KEY": "<LIVEWIRE_API_KEY>",
        "MCP_AUTH_MODE": "<MCP_AUTH_MODE>",
        "MCP_API_KEY": "<MCP_API_KEY>",
        "MCP_ED25519_PUBLIC_KEY": "<MCP_ED25519_PUBLIC_KEY>",
        "MCP_SIGNED_KEY_AUDIENCE": "<MCP_SIGNED_KEY_AUDIENCE>",
        "MCP_OAUTH_ISSUER": "<MCP_OAUTH_ISSUER>",
        "MCP_OAUTH_JWKS_URI": "<MCP_OAUTH_JWKS_URI>",
        "MCP_OAUTH_AUDIENCE": "<MCP_OAUTH_AUDIENCE>",
        "ACCEPT_EULA": "<ACCEPT_EULA>"
      }
    }
  }
}

启动命令

docker run -i --rm -e LIVEWIRE_BASE_URL -e LIVEWIRE_API_KEY -e MCP_AUTH_MODE -e MCP_API_KEY -e MCP_ED25519_PUBLIC_KEY -e MCP_SIGNED_KEY_AUDIENCE -e MCP_OAUTH_ISSUER -e MCP_OAUTH_JWKS_URI -e MCP_OAUTH_AUDIENCE -e ACCEPT_EULA quay.io/bluecat/livewiremcp@sha256:c1614cbe6bca212d0287c5fdfafc09b83579b38eb7e5f9b1fc4011902d41d385

需要配置的环境变量

LIVEWIRE_BASE_URLLiveWire base URL (e.g., https://livewire.example.com).

LIVEWIRE_API_KEY密钥LiveWire API key. Mint a managed durable token (POST /api/v1/tokens/) rather than a /login session token — see --help for the full procedure.

MCP_AUTH_MODE密钥Client authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default).

MCP_API_KEY密钥Static bearer token clients present as `Authorization: Bearer <key>`. Required only when MCP_AUTH_MODE=static-key.

MCP_ED25519_PUBLIC_KEY密钥Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-issued token for this server verifies against it. For anything beyond a trial, generate a per-deployment key pair (license-keygen --gen-key) and set this to its public half.

MCP_SIGNED_KEY_AUDIENCE密钥When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset means the aud claim is not checked. Only meaningful with MCP_AUTH_MODE=signed-key.

MCP_OAUTH_ISSUER密钥Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.

MCP_OAUTH_JWKS_URI密钥JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.

MCP_OAUTH_AUDIENCE密钥Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely.

ACCEPT_EULASet to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it.

本地服务需要在你的电脑上安装运行环境（如 Node.js 18+）。各客户端的配置文件位置不同，请参考客户端文档。

安装包

ociquay.io/bluecat/livewiremcp@sha256:c1614cbe6bca212d0287c5fdfafc09b83579b38eb7e5f9b1fc4011902d41d385Streamable HTTP