nexus-mcp-server
A community-built Model Context Protocol server for Sonatype Nexus Repository 3. It provides read-only access to inventory repositories, blob stores, tasks, and users. It generates architecture documentation, performs drift checks against declared states, and audits content within bounded scopes. The server is designed for security and transparency, redacting secrets and clearly marking tool hints.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Inventory repositories, blob stores, and users
- Generate architecture documentation and relationship graphs
- Perform drift checks against declared state
- Audit content within a single repository
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
ghcr.io/oomchiller/nexus-mcp-server:0.2.1
{
"transport": "stdio",
"identifier": "ghcr.io/oomchiller/nexus-mcp-server:0.2.1",
"registryType": "oci",
"environmentVariables": [
{
"name": "NEXUS_URL",
"format": "string",
"isRequired": true,
"description": "Nexus base URL, for example https://nexus.example.com"
},
{
"name": "NEXUS_USERNAME",
"format": "string",
"description": "Nexus user; a read-only account is recommended"
},
{
"name": "NEXUS_PASSWORD",
"format": "string",
"description": "Password for NEXUS_USERNAME"
},
{
"name": "NEXUS_VERIFY_TLS",
"format": "boolean",
"default": "true",
"description": "Verify the Nexus TLS certificate"
},
{
"name": "NEXUS_MCP_MODE",
"format": "string",
"choices": [
"readonly",
"audit",
"admin"
],
"default": "readonly",
"description": "readonly, audit or admin"
},
{
"name": "NEXUS_MCP_ENABLE_WRITE_TOOLS",
"format": "boolean",
"default": "false",
"description": "With admin mode, list and allow repository deletion and task runs"
},
{
"name": "NEXUS_MCP_ENABLE_RAW_API",
"format": "boolean",
"default": "false",
"description": "List the nexus_api_call tool for REST paths under /service/rest/"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"nexus-mcp-server": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"NEXUS_URL=<YOUR_NEXUS_URL>",
"-e",
"NEXUS_USERNAME=<YOUR_NEXUS_USERNAME>",
"-e",
"NEXUS_PASSWORD=<YOUR_NEXUS_PASSWORD>",
"-e",
"NEXUS_VERIFY_TLS=<YOUR_NEXUS_VERIFY_TLS>",
"-e",
"NEXUS_MCP_MODE=<YOUR_NEXUS_MCP_MODE>",
"-e",
"NEXUS_MCP_ENABLE_WRITE_TOOLS=<YOUR_NEXUS_MCP_ENABLE_WRITE_TOOLS>",
"-e",
"NEXUS_MCP_ENABLE_RAW_API=<YOUR_NEXUS_MCP_ENABLE_RAW_API>",
"ghcr.io/oomchiller/nexus-mcp-server:0.2.1"
],
"env": {
"NEXUS_URL": "<YOUR_NEXUS_URL>",
"NEXUS_USERNAME": "<YOUR_NEXUS_USERNAME>",
"NEXUS_PASSWORD": "<YOUR_NEXUS_PASSWORD>",
"NEXUS_VERIFY_TLS": "<YOUR_NEXUS_VERIFY_TLS>",
"NEXUS_MCP_MODE": "<YOUR_NEXUS_MCP_MODE>",
"NEXUS_MCP_ENABLE_WRITE_TOOLS": "<YOUR_NEXUS_MCP_ENABLE_WRITE_TOOLS>",
"NEXUS_MCP_ENABLE_RAW_API": "<YOUR_NEXUS_MCP_ENABLE_RAW_API>"
}
}
}
}Cline
{
"mcpServers": {
"nexus-mcp-server": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"NEXUS_URL=<YOUR_NEXUS_URL>",
"-e",
"NEXUS_USERNAME=<YOUR_NEXUS_USERNAME>",
"-e",
"NEXUS_PASSWORD=<YOUR_NEXUS_PASSWORD>",
"-e",
"NEXUS_VERIFY_TLS=<YOUR_NEXUS_VERIFY_TLS>",
"-e",
"NEXUS_MCP_MODE=<YOUR_NEXUS_MCP_MODE>",
"-e",
"NEXUS_MCP_ENABLE_WRITE_TOOLS=<YOUR_NEXUS_MCP_ENABLE_WRITE_TOOLS>",
"-e",
"NEXUS_MCP_ENABLE_RAW_API=<YOUR_NEXUS_MCP_ENABLE_RAW_API>",
"ghcr.io/oomchiller/nexus-mcp-server:0.2.1"
],
"env": {
"NEXUS_URL": "<YOUR_NEXUS_URL>",
"NEXUS_USERNAME": "<YOUR_NEXUS_USERNAME>",
"NEXUS_PASSWORD": "<YOUR_NEXUS_PASSWORD>",
"NEXUS_VERIFY_TLS": "<YOUR_NEXUS_VERIFY_TLS>",
"NEXUS_MCP_MODE": "<YOUR_NEXUS_MCP_MODE>",
"NEXUS_MCP_ENABLE_WRITE_TOOLS": "<YOUR_NEXUS_MCP_ENABLE_WRITE_TOOLS>",
"NEXUS_MCP_ENABLE_RAW_API": "<YOUR_NEXUS_MCP_ENABLE_RAW_API>"
}
}
}
}VS Code
{
"servers": {
"nexus-mcp-server": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"NEXUS_URL=<YOUR_NEXUS_URL>",
"-e",
"NEXUS_USERNAME=<YOUR_NEXUS_USERNAME>",
"-e",
"NEXUS_PASSWORD=<YOUR_NEXUS_PASSWORD>",
"-e",
"NEXUS_VERIFY_TLS=<YOUR_NEXUS_VERIFY_TLS>",
"-e",
"NEXUS_MCP_MODE=<YOUR_NEXUS_MCP_MODE>",
"-e",
"NEXUS_MCP_ENABLE_WRITE_TOOLS=<YOUR_NEXUS_MCP_ENABLE_WRITE_TOOLS>",
"-e",
"NEXUS_MCP_ENABLE_RAW_API=<YOUR_NEXUS_MCP_ENABLE_RAW_API>",
"ghcr.io/oomchiller/nexus-mcp-server:0.2.1"
],
"env": {
"NEXUS_URL": "<YOUR_NEXUS_URL>",
"NEXUS_USERNAME": "<YOUR_NEXUS_USERNAME>",
"NEXUS_PASSWORD": "<YOUR_NEXUS_PASSWORD>",
"NEXUS_VERIFY_TLS": "<YOUR_NEXUS_VERIFY_TLS>",
"NEXUS_MCP_MODE": "<YOUR_NEXUS_MCP_MODE>",
"NEXUS_MCP_ENABLE_WRITE_TOOLS": "<YOUR_NEXUS_MCP_ENABLE_WRITE_TOOLS>",
"NEXUS_MCP_ENABLE_RAW_API": "<YOUR_NEXUS_MCP_ENABLE_RAW_API>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"nexus-mcp-server": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"NEXUS_URL=<YOUR_NEXUS_URL>",
"-e",
"NEXUS_USERNAME=<YOUR_NEXUS_USERNAME>",
"-e",
"NEXUS_PASSWORD=<YOUR_NEXUS_PASSWORD>",
"-e",
"NEXUS_VERIFY_TLS=<YOUR_NEXUS_VERIFY_TLS>",
"-e",
"NEXUS_MCP_MODE=<YOUR_NEXUS_MCP_MODE>",
"-e",
"NEXUS_MCP_ENABLE_WRITE_TOOLS=<YOUR_NEXUS_MCP_ENABLE_WRITE_TOOLS>",
"-e",
"NEXUS_MCP_ENABLE_RAW_API=<YOUR_NEXUS_MCP_ENABLE_RAW_API>",
"ghcr.io/oomchiller/nexus-mcp-server:0.2.1"
],
"env": {
"NEXUS_URL": "<YOUR_NEXUS_URL>",
"NEXUS_USERNAME": "<YOUR_NEXUS_USERNAME>",
"NEXUS_PASSWORD": "<YOUR_NEXUS_PASSWORD>",
"NEXUS_VERIFY_TLS": "<YOUR_NEXUS_VERIFY_TLS>",
"NEXUS_MCP_MODE": "<YOUR_NEXUS_MCP_MODE>",
"NEXUS_MCP_ENABLE_WRITE_TOOLS": "<YOUR_NEXUS_MCP_ENABLE_WRITE_TOOLS>",
"NEXUS_MCP_ENABLE_RAW_API": "<YOUR_NEXUS_MCP_ENABLE_RAW_API>"
}
}
}
}Let your agent find its tools
Find servers like nexus-mcp-server from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.