Works with an Illumio PCE for security policy management, workload operations, traffic analysis and compliance checks.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add illumio --env API_KEY='<API_KEY>' --env API_SECRET='<API_SECRET>' --env PCE_HOST='<PCE_HOST>' --env PCE_ORG_ID='<PCE_ORG_ID>' --env PCE_PORT='<PCE_PORT>' -- docker run -i --init --rm -v /Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp -e DOCKER_CONTAINER=true -e PYTHONWARNINGS=ignore --env-file /Users/YOUR_USERNAME/.illumio-mcp.env illumio-mcp:latest~/.codex/config.toml
[mcp_servers.illumio]
command = "docker"
args = ["run", "-i", "--init", "--rm", "-v", "/Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp", "-e", "DOCKER_CONTAINER=true", "-e", "PYTHONWARNINGS=ignore", "--env-file", "/Users/YOUR_USERNAME/.illumio-mcp.env", "illumio-mcp:latest"]
env = { API_KEY = "<API_KEY>", API_SECRET = "<API_SECRET>", PCE_HOST = "<PCE_HOST>", PCE_ORG_ID = "<PCE_ORG_ID>", PCE_PORT = "<PCE_PORT>" }
# codex mcp add illumio --env API_KEY='<API_KEY>' --env API_SECRET='<API_SECRET>' --env PCE_HOST='<PCE_HOST>' --env PCE_ORG_ID='<PCE_ORG_ID>' --env PCE_PORT='<PCE_PORT>' -- docker run -i --init --rm -v /Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp -e DOCKER_CONTAINER=true -e PYTHONWARNINGS=ignore --env-file /Users/YOUR_USERNAME/.illumio-mcp.env illumio-mcp:latest~/.cursor/mcp.json
{
"mcpServers": {
"illumio": {
"command": "docker",
"args": [
"run",
"-i",
"--init",
"--rm",
"-v",
"/Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp",
"-e",
"DOCKER_CONTAINER=true",
"-e",
"PYTHONWARNINGS=ignore",
"--env-file",
"/Users/YOUR_USERNAME/.illumio-mcp.env",
"illumio-mcp:latest"
],
"env": {
"API_KEY": "<API_KEY>",
"API_SECRET": "<API_SECRET>",
"PCE_HOST": "<PCE_HOST>",
"PCE_ORG_ID": "<PCE_ORG_ID>",
"PCE_PORT": "<PCE_PORT>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"illumio": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--init",
"--rm",
"-v",
"/Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp",
"-e",
"DOCKER_CONTAINER=true",
"-e",
"PYTHONWARNINGS=ignore",
"--env-file",
"/Users/YOUR_USERNAME/.illumio-mcp.env",
"illumio-mcp:latest"
],
"env": {
"API_KEY": "<API_KEY>",
"API_SECRET": "<API_SECRET>",
"PCE_HOST": "<PCE_HOST>",
"PCE_ORG_ID": "<PCE_ORG_ID>",
"PCE_PORT": "<PCE_PORT>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"illumio": {
"command": "docker",
"args": [
"run",
"-i",
"--init",
"--rm",
"-v",
"/Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp",
"-e",
"DOCKER_CONTAINER=true",
"-e",
"PYTHONWARNINGS=ignore",
"--env-file",
"/Users/YOUR_USERNAME/.illumio-mcp.env",
"illumio-mcp:latest"
],
"env": {
"API_KEY": "<API_KEY>",
"API_SECRET": "<API_SECRET>",
"PCE_HOST": "<PCE_HOST>",
"PCE_ORG_ID": "<PCE_ORG_ID>",
"PCE_PORT": "<PCE_PORT>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"illumio": {
"command": "docker",
"args": [
"run",
"-i",
"--init",
"--rm",
"-v",
"/Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp",
"-e",
"DOCKER_CONTAINER=true",
"-e",
"PYTHONWARNINGS=ignore",
"--env-file",
"/Users/YOUR_USERNAME/.illumio-mcp.env",
"illumio-mcp:latest"
],
"env": {
"API_KEY": "<API_KEY>",
"API_SECRET": "<API_SECRET>",
"PCE_HOST": "<PCE_HOST>",
"PCE_ORG_ID": "<PCE_ORG_ID>",
"PCE_PORT": "<PCE_PORT>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"illumio": {
"command": "docker",
"args": [
"run",
"-i",
"--init",
"--rm",
"-v",
"/Users/YOUR_USERNAME/tmp:/var/log/illumio-mcp",
"-e",
"DOCKER_CONTAINER=true",
"-e",
"PYTHONWARNINGS=ignore",
"--env-file",
"/Users/YOUR_USERNAME/.illumio-mcp.env",
"illumio-mcp:latest"
],
"env": {
"API_KEY": "<API_KEY>",
"API_SECRET": "<API_SECRET>",
"PCE_HOST": "<PCE_HOST>",
"PCE_ORG_ID": "<PCE_ORG_ID>",
"PCE_PORT": "<PCE_PORT>"
}
}
}
}Environment variables
API_KEYAPI_SECRETPCE_HOSTPCE_ORG_IDPCE_PORT
Replace the placeholders with your own credentials and keep them out of version control.