Security MCP Server 🐳 Docker

Blumira MCP

MCP server for the Blumira SIEM platform. Access security findings, agents, users, resolutions, and MSP multi-account management.

Installation

Run the MCP server with npx:

npx blumira-mcp

Or install the package:

npm install blumira-mcp

Claude Desktop Configuration

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "blumira": {
      "command": "npx",
      "args": [
        "blumira-mcp"
      ],
      "env": {
        "BLUMIRA_JWT_TOKEN": "your-blumira-jwt-token"
      }
    }
  }
}

Authentication

Variable	Required	Description
`BLUMIRA_JWT_TOKEN`	Yes	JWT authentication token from your Blumira account

Architecture

Single TypeScript MCP server supporting both stdio and Streamable HTTP transports.

Available Tools (13)

Tools are organized into 3 domains:

Findings

View, resolve, and comment on security findings.

Tool	Description
`List findings`	List security findings with filtering
`Get finding`	Get details for a specific finding
`Resolve finding`	Mark a finding as resolved
`Assign finding`	Assign a finding to a user
`List comments`	List comments on a finding
`Add comment`	Add a comment to a finding

Agents & Devices

Manage Blumira agents and monitored devices.

Tool	Description
`List devices`	List monitored devices
`Get device`	Get details for a specific device
`List agent keys`	List agent deployment keys

MSP Management

Multi-account management for MSP environments.

Tool	Description
`List MSP accounts`	List all managed accounts
`Get MSP findings`	View findings across all accounts
`List MSP devices`	List devices across all accounts
`List MSP users`	List users across all accounts