Illumio MCP Server

🚀 Illumio MCP Server

The Illumio MCP Server is a control plane for managing Illumio security policies, offering an interface to interact with the Illumio PCE and supporting Docker containerization.

🚀 Quick Start

Illumio MCP (Micro Control Plane) is a control plane for managing Illumio security policies. It provides an interface to interact with the Illumio PCE (Policy Control Engine) and supports running in Docker containers.

✨ Features

Key Features

• Claude Desktop Integration: The Illumio MCP Server can be integrated into the Claude Desktop environment through configuration.
• Docker Support: It offers full Docker runtime support, including container initialization and automatic cleanup.
• Logging: It supports outputting runtime logs to a specified directory for easy monitoring and debugging.

Use Cases

• Security Policy Management: Used for managing and configuring Illumio's security policies.
• Automated Operations: The interface of the Illumio MCP Server can be invoked through scripts or automated tools.
• Development and Testing: It provides Docker Compose support, making it convenient for developers to quickly set up and test environments.

📦 Installation

Environment Requirements

• Operating System: Linux and macOS are supported.
• Docker Version: Docker 1.20 or higher is required.
• Illumio PCE: The Illumio PCE service must be available.

Pull the Image

docker pull ghcr.io/alexgoller/illumio-mcp-server:latest

If you want to use a specific version, you can specify the tag:

docker pull ghcr.io/alexgoller/illumio-mcp-server:1.0.0

💻 Usage Examples

Integration with Claude Desktop

To integrate the container with Claude Desktop, follow these steps:

1. Create an environment variable file (e.g., ~/.illumio-mcp.env) with the following content:

PCE_HOST=your-pce-host
PCE_PORT=your-pce-port
PCE_ORG_ID=1
API_KEY=your-api-key
API_SECRET=your-api-secret

2. Add the following configuration to your Claude Desktop configuration file (e.g., ~/Library/Application Support/Claude/claude_desktop_config.json on MacOS):

{
    "mcpServers": {
        "illumio-mcp-docker": {
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--init",
                "--rm",
                "-v",
                "/Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp",
                "-e",
                "DOCKER_CONTAINER=true",
                "-e",
                "PYTHONWARNINGS=ignore",
                "--env-file",
                "/Users/YOUR_USERNAME/.illumio-mcp.env",
                "illumio-mcp:latest"
            ]
        }
    }
}

⚠️ Important Note

• Replace YOUR_USERNAME with your actual username.
• Create the log directory (e.g., ~/tmp).
• Adjust the paths as needed.

Standalone Operation

You can run the container directly:

docker run -i --init --rm \
  -v /path/to/logs:/var/log/illumio-mcp \
  -e DOCKER_CONTAINER=true \
  -e PYTHONWARNINGS=ignore \
  --env-file /Users/YOUR_USERNAME/.illumio-mcp.env \
  illumio-mcp:latest

Docker Compose Support

If you use Docker Compose, you can refer to the following example:

version: '3'
services:
  illumio-mcp:
    image: ghcr.io/alexgoller/illumio-mcp-server:latest
    volumes:
      - /path/to/logs:/var/log/illumio-mcp
    environment:
      - DOCKER_CONTAINER=true
      - PYTHONWARNINGS=ignore
    env_file: /Users/YOUR_USERNAME/.illumio-mcp.env

📚 Documentation

Known Issues

• Log Path Issue: Ensure that the specified log directory exists and has write permissions.
• Environment Variable Configuration: All environment variables need to be filled in correctly; otherwise, the connection to the PCE will fail.

Summary

The Illumio MCP Server provides users with a powerful tool for managing Illumio security policies. Through Docker containerization, users can easily use it in different environments and support integration with Claude Desktop.