MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.
ROCKETCYBER_API_KEYAPI keyrequiredRocketCyber API key for authenticating to the Managed SOC API
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
rocketcyber_test_connectionTest the connection to RocketCyber APITest the connection to RocketCyber API
No input schema was published for this tool.
rocketcyber_get_accountGet RocketCyber account informationGet RocketCyber account information
No input schema was published for this tool.
rocketcyber_list_agentsList monitored agents/endpoints in RocketCyberList monitored agents/endpoints in RocketCyber
No input schema was published for this tool.
rocketcyber_list_incidentsList security incidents in RocketCyber. By default, long free-text fields (description, remediation) are truncated to ~300 characters, and the total response is capped at ~40,000 characters (a size cap) — if a page does not fit, only the first incidents are returned and the message says how many; u…List security incidents in RocketCyber. By default, long free-text fields (description, remediation) are truncated to ~300 characters, and the total response is capped at ~40,000 characters (a size cap) — if a page does not fit, only the first incidents are returned and the message says how many; u…
No input schema was published for this tool.
rocketcyber_list_eventsList security events in RocketCyber. Requires appId - unlike every other list_* tool here,List security events in RocketCyber. Requires appId - unlike every other list_* tool here,
No input schema was published for this tool.
rocketcyber_get_event_summaryGet event summary/statistics from RocketCyberGet event summary/statistics from RocketCyber
No input schema was published for this tool.
rocketcyber_list_firewallsList firewall devices in RocketCyberList firewall devices in RocketCyber
No input schema was published for this tool.
rocketcyber_list_appsList managed apps in RocketCyberList managed apps in RocketCyber
No input schema was published for this tool.
rocketcyber_get_defenderGet Windows Defender status from RocketCyberGet Windows Defender status from RocketCyber
No input schema was published for this tool.
rocketcyber_get_officeGet Office 365 status from RocketCyberGet Office 365 status from RocketCyber
No input schema was published for this tool.
10 of 10 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.