
Blumira
Connects Claude to the Blumira SIEM API for querying security findings, device agents, user accounts, and detection evidence. Supports both single-tenant and MSP multi-account operations with tools for listing alerts, resolving findings, managing comments, and pulling device/agent data. Uses decision-tree navigation where you start with a domain picker, then get domain-specific tools loaded dynamically. Handles Blumira's filter syntax for status, severity, timestamps, and regex matching. Ships as an MCPB bundle for one-click install in Claude Desktop, or runs via Docker with HTTP transport. Good fit if you're triaging security incidents in Blumira and want LLM-assisted querying without switching contexts.
- tool
- 1
- auth
- Secret needed
- transport
- STDIO
- env vars
- 4
- last updated
- Aug 20, 2026
Tools
1 toolsPublic tool metadata for what this MCP can expose to an agent.
blumira_navigateStart with `blumira_navigate` to pick a domain and explore domains before loading domain-specific tools.
Start with `blumira_navigate` to pick a domain and explore domains before loading domain-specific tools.
No parameter schema in public metadata yet.
Sponsors
Configuration
BLUMIRA_JWT_TOKEN*secretBlumira API JWT token used to authenticate requests
MCP_TRANSPORTdefault: stdioTransport mode for the server. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODEdefault: envCredential source: 'env' reads vars locally, 'gateway' expects header injection from the WYRE MCP Gateway.
LOG_LEVELdefault: infoLog verbosity: debug, info, warn, error
Readme
Blumira MCP Server
A Model Context Protocol (MCP) server that provides AI assistants with structured access to Blumira SIEM platform data and operations.
Note: This project is maintained by Wyre Technology.
Quick Start
Claude Desktop — download, open, done:
- Download
blumira-mcp.mcpbfrom the latest release - Open the file (double-click or drag into Claude Desktop)
- Enter your Blumira JWT token when prompted
No terminal, no JSON editing, no Node.js install required.
Claude Code (CLI):
claude mcp add blumira-mcp \
-e BLUMIRA_JWT_TOKEN=your-jwt-token \
-- npx -y github:WYRE-AI/blumira-mcp
Details
- Repository
- github.com/wyre-technology/blumira-mcp
- Website
- github.com/wyre-technology/blumira-mcp
- Category
- Data & Analytics
- Package
ghcr.io/wyre-technology/blumira-mcp:v1.2.12- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active