Integritymcp

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Runs on your computer
• Transport: Streamable HTTP
• Category: Other
• You need to fill in: BAM_BASE_URL, BAM_PASSWORD, BAM_SSO_PASSWORD, MCP_AUTH_MODE, MCP_API_KEY, MCP_REQUEST_STATE_KEY, MCP_REQUEST_STATE_KEY_PREVIOUS, ACCEPT_EULA

Install

Pick the AI app you use, then copy the settings.

You need

• DockerDocker installed

Which app do you use?

{
  "mcpServers": {
    "integritymcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "BAM_BASE_URL",
        "-e",
        "BAM_USERNAME",
        "-e",
        "BAM_PASSWORD",
        "-e",
        "BAM_SSO_USERNAME",
        "-e",
        "BAM_SSO_PASSWORD",
        "-e",
        "MCP_AUTH_MODE",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_REQUEST_STATE_KEY",
        "-e",
        "MCP_REQUEST_STATE_KEY_PREVIOUS",
        "-e",
        "MCP_ED25519_PUBLIC_KEY",
        "-e",
        "MCP_SIGNED_KEY_AUDIENCE",
        "-e",
        "MCP_OAUTH_ISSUER",
        "-e",
        "MCP_OAUTH_JWKS_URI",
        "-e",
        "MCP_OAUTH_AUDIENCE",
        "-e",
        "ACCEPT_EULA",
        "quay.io/bluecat/integritymcp@sha256:1b38c5fc9321ced181e414b82873a705a46b80c28209227e39fea4578e7a3a0d"
      ],
      "env": {
        "BAM_BASE_URL": "your-value",
        "BAM_USERNAME": "your-value",
        "BAM_PASSWORD": "your-value",
        "BAM_SSO_USERNAME": "your-value",
        "BAM_SSO_PASSWORD": "your-value",
        "MCP_AUTH_MODE": "your-value",
        "MCP_API_KEY": "your-value",
        "MCP_REQUEST_STATE_KEY": "your-value",
        "MCP_REQUEST_STATE_KEY_PREVIOUS": "your-value",
        "MCP_ED25519_PUBLIC_KEY": "your-value",
        "MCP_SIGNED_KEY_AUDIENCE": "your-value",
        "MCP_OAUTH_ISSUER": "your-value",
        "MCP_OAUTH_JWKS_URI": "your-value",
        "MCP_OAUTH_AUDIENCE": "your-value",
        "ACCEPT_EULA": "your-value"
      }
    }
  }
}

claude mcp add integritymcp --env BAM_BASE_URL=your-value --env BAM_USERNAME=your-value --env BAM_PASSWORD=your-value --env BAM_SSO_USERNAME=your-value --env BAM_SSO_PASSWORD=your-value --env MCP_AUTH_MODE=your-value --env MCP_API_KEY=your-value --env MCP_REQUEST_STATE_KEY=your-value --env MCP_REQUEST_STATE_KEY_PREVIOUS=your-value --env MCP_ED25519_PUBLIC_KEY=your-value --env MCP_SIGNED_KEY_AUDIENCE=your-value --env MCP_OAUTH_ISSUER=your-value --env MCP_OAUTH_JWKS_URI=your-value --env MCP_OAUTH_AUDIENCE=your-value --env ACCEPT_EULA=your-value -- docker run -i --rm -e BAM_BASE_URL -e BAM_USERNAME -e BAM_PASSWORD -e BAM_SSO_USERNAME -e BAM_SSO_PASSWORD -e MCP_AUTH_MODE -e MCP_API_KEY -e MCP_REQUEST_STATE_KEY -e MCP_REQUEST_STATE_KEY_PREVIOUS -e MCP_ED25519_PUBLIC_KEY -e MCP_SIGNED_KEY_AUDIENCE -e MCP_OAUTH_ISSUER -e MCP_OAUTH_JWKS_URI -e MCP_OAUTH_AUDIENCE -e ACCEPT_EULA quay.io/bluecat/integritymcp@sha256:1b38c5fc9321ced181e414b82873a705a46b80c28209227e39fea4578e7a3a0d

{
  "mcpServers": {
    "integritymcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "BAM_BASE_URL",
        "-e",
        "BAM_USERNAME",
        "-e",
        "BAM_PASSWORD",
        "-e",
        "BAM_SSO_USERNAME",
        "-e",
        "BAM_SSO_PASSWORD",
        "-e",
        "MCP_AUTH_MODE",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_REQUEST_STATE_KEY",
        "-e",
        "MCP_REQUEST_STATE_KEY_PREVIOUS",
        "-e",
        "MCP_ED25519_PUBLIC_KEY",
        "-e",
        "MCP_SIGNED_KEY_AUDIENCE",
        "-e",
        "MCP_OAUTH_ISSUER",
        "-e",
        "MCP_OAUTH_JWKS_URI",
        "-e",
        "MCP_OAUTH_AUDIENCE",
        "-e",
        "ACCEPT_EULA",
        "quay.io/bluecat/integritymcp@sha256:1b38c5fc9321ced181e414b82873a705a46b80c28209227e39fea4578e7a3a0d"
      ],
      "env": {
        "BAM_BASE_URL": "your-value",
        "BAM_USERNAME": "your-value",
        "BAM_PASSWORD": "your-value",
        "BAM_SSO_USERNAME": "your-value",
        "BAM_SSO_PASSWORD": "your-value",
        "MCP_AUTH_MODE": "your-value",
        "MCP_API_KEY": "your-value",
        "MCP_REQUEST_STATE_KEY": "your-value",
        "MCP_REQUEST_STATE_KEY_PREVIOUS": "your-value",
        "MCP_ED25519_PUBLIC_KEY": "your-value",
        "MCP_SIGNED_KEY_AUDIENCE": "your-value",
        "MCP_OAUTH_ISSUER": "your-value",
        "MCP_OAUTH_JWKS_URI": "your-value",
        "MCP_OAUTH_AUDIENCE": "your-value",
        "ACCEPT_EULA": "your-value"
      }
    }
  }
}

{
  "servers": {
    "integritymcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "BAM_BASE_URL",
        "-e",
        "BAM_USERNAME",
        "-e",
        "BAM_PASSWORD",
        "-e",
        "BAM_SSO_USERNAME",
        "-e",
        "BAM_SSO_PASSWORD",
        "-e",
        "MCP_AUTH_MODE",
        "-e",
        "MCP_API_KEY",
        "-e",
        "MCP_REQUEST_STATE_KEY",
        "-e",
        "MCP_REQUEST_STATE_KEY_PREVIOUS",
        "-e",
        "MCP_ED25519_PUBLIC_KEY",
        "-e",
        "MCP_SIGNED_KEY_AUDIENCE",
        "-e",
        "MCP_OAUTH_ISSUER",
        "-e",
        "MCP_OAUTH_JWKS_URI",
        "-e",
        "MCP_OAUTH_AUDIENCE",
        "-e",
        "ACCEPT_EULA",
        "quay.io/bluecat/integritymcp@sha256:1b38c5fc9321ced181e414b82873a705a46b80c28209227e39fea4578e7a3a0d"
      ],
      "env": {
        "BAM_BASE_URL": "your-value",
        "BAM_USERNAME": "your-value",
        "BAM_PASSWORD": "your-value",
        "BAM_SSO_USERNAME": "your-value",
        "BAM_SSO_PASSWORD": "your-value",
        "MCP_AUTH_MODE": "your-value",
        "MCP_API_KEY": "your-value",
        "MCP_REQUEST_STATE_KEY": "your-value",
        "MCP_REQUEST_STATE_KEY_PREVIOUS": "your-value",
        "MCP_ED25519_PUBLIC_KEY": "your-value",
        "MCP_SIGNED_KEY_AUDIENCE": "your-value",
        "MCP_OAUTH_ISSUER": "your-value",
        "MCP_OAUTH_JWKS_URI": "your-value",
        "MCP_OAUTH_AUDIENCE": "your-value",
        "ACCEPT_EULA": "your-value"
      }
    }
  }
}

Your choice stays on this device in a cookie; no account needed.

Values you fill in

• BAM_BASE_URL required env
  BAM base URL (e.g., https://bam.bluecat.com).
• BAM_USERNAME env
  BAM service-account username. Required unless the SSO pair (BAM_SSO_USERNAME + BAM_SSO_PASSWORD) is used instead — the server needs exactly one of the two pairs.
• BAM_PASSWORD secret env
  BAM service-account password. Required alongside BAM_USERNAME, unless the SSO pair is used instead.
• BAM_SSO_USERNAME env
  BAM SSO username. Alternative to BAM_USERNAME + BAM_PASSWORD; the server needs exactly one of the two pairs.
• BAM_SSO_PASSWORD secret env
  BAM SSO password. Required alongside BAM_SSO_USERNAME when using the SSO pair.
• MCP_AUTH_MODE required env
  Client authentication mode for the /mcp endpoint. One of: none | static-key | signed-key | resource-server. Required at runtime — the server refuses to start without it (no default).
• MCP_API_KEY secret env
  Static bearer token clients present as `Authorization: Bearer `. Required only when MCP_AUTH_MODE=static-key.
• MCP_REQUEST_STATE_KEY secret env
  HMAC key (at least 32 bytes) sealing the approval-gated write tools' requestState on MCP 2026-07-28 connections (#1031). Optional: unset uses a random per-process key, which is fine for a single repl…
• MCP_REQUEST_STATE_KEY_PREVIOUS secret env
  Second requestState HMAC key, accepted for opening a sealed plan but never for sealing one: two-key rotation of MCP_REQUEST_STATE_KEY (#1032). Optional, and only valid together with MCP_REQUEST_STATE…
• MCP_ED25519_PUBLIC_KEY env
  Ed25519 public key (base64url) that MCP_AUTH_MODE=signed-key verifies license tokens against. DEFAULTS TO A SHARED DEMO KEY, which authenticates a token holder rather than a customer — every BlueCat-…
• MCP_SIGNED_KEY_AUDIENCE env
  When set, a license token must carry exactly this audience or it is rejected — a declarative scope check on top of the key, so a token minted for another deployment fails even if it verifies. Unset m…
• MCP_OAUTH_ISSUER env
  Token issuer URL, matched against the iss claim of incoming JWTs. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.
• MCP_OAUTH_JWKS_URI env
  JWKS endpoint whose public keys verify the signature on every incoming Bearer JWT. Required when MCP_AUTH_MODE=resource-server — the server refuses to start in that mode without it.
• MCP_OAUTH_AUDIENCE env
  Expected JWT aud claim for MCP_AUTH_MODE=resource-server. A token carrying a different audience, or no aud claim at all, is rejected. Unset skips audience validation entirely.
• ACCEPT_EULA required env
  Set to Y (or Yes/YES, any casing) to accept the BlueCat End User License Agreement. The container refuses to start without it.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

• ! Caution

  Maker matches the repo

  The registry lists no source repo, so we cannot match the publisher (bluecat.com) to the code

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• – Not applicable

  Endpoint responds

  This one runs on your computer; there is no internet endpoint

• – Not applicable

  Sign-in with OAuth

  Runs on your computer and uses local settings instead

• … Not checked yet

  No hidden instructions in tool descriptions

  Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

• More stars than 0% of the other 32602 servers in this category
• Published to the registry more recently than 49% of the other 32602 servers in this category
• Basic checks equal to or better than 30% of the other 32602 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker

No README found in the repo