Atera MCP for Codex

A standalone MCP server for the official Atera REST API.

The current vertical slice already includes:

• MCP stdio transport with legacy/modern protocol negotiation;

• atera_health_check and atera_capabilities;

• reading Customers, Agents, Tickets, and Alerts;

• auto-selection of legacy X-API-KEY or Bearer JWT, with a manual override;

• timeout, cancellation, rate limiting, Retry-After, and retry of safe GETs;

• normalized errors and a managed mutation policy (writes and deletions are enabled by default).

The full catalog of all Atera endpoints is added after importing the current OpenAPI. Instructions: docs/OPENAPI_IMPORT.md. Reference baseline by domain: REFERENCE_COVERAGE.md.

The local tenant export has already been verified: OpenAPI 3.0.4, 81 paths, and 136 operations (69 GET, 35 POST, 19 PUT, 13 DELETE). The file is located in openapi-private/ and is intentionally excluded from git; on startup, the server publishes these operations as additional MCP tools.

Running

npm install
npm run typecheck
npm test
npm run build
npm run openapi:validate -- openapi-private/atera-openapi.json

The last command checks the imported tenant schema before restarting Codex. If the file does not exist yet, it exits with a clear diagnostic.

Variables are set through the environment; the template is in .env.example. At minimum, ATERA_API_TOKEN or legacy ATERA_API_KEY is required.

ATERA_API_TOKEN='…' npm start

Do not add the secret to git or pass it in MCP tool arguments.

Related MCP server: Codex MCP Server

Connecting to Codex

In the Codex configuration, add the local server. On macOS/Linux, check the Node.js path with which node; on Windows, use where node:

[mcp_servers.atera]
command = "/opt/homebrew/bin/node"
args = ["/Users/vardahei/Documents/atera-mcp/dist/src/index.js"]
startup_timeout_sec = 30

[mcp_servers.atera.env]
ATERA_API_TOKEN = "<Atera token>"
ATERA_BASE_URL = "https://api.atera.com/api/v3"
ATERA_AUTH_MODE = "bearer"
ATERA_OPENAPI_PATH = "/Users/vardahei/Documents/atera-mcp/openapi-private/atera-openapi.json"
ATERA_WRITE_ENABLED = "true"
ATERA_ENABLE_DESTRUCTIVE_OPERATIONS = "true"

Writes and deletions are enabled by default. You can disable them locally by setting the corresponding value to false. Capabilities are still limited by the Atera token's permissions.

Employee Installation from GitHub

An employee can give Codex the following task on any supported OS:

Установи Atera MCP из https://github.com/Oleksandr-Kliuiev/atera-mcp.
Определи мою ОС. На macOS/Linux выполни scripts/install-codex.sh, на Windows — scripts/install-codex.ps1.
Не запрашивай и не выводи мой Atera token в чат. После установки объясни, как добавить мой token локально в окружение MCP-сервера atera.

For macOS/Linux, you can run locally:

git clone https://github.com/Oleksandr-Kliuiev/atera-mcp.git ~/.local/share/codex/atera-mcp
~/.local/share/codex/atera-mcp/scripts/install-codex.sh

For Windows PowerShell:

$dir = Join-Path $HOME ".local\share\codex\atera-mcp"
git clone https://github.com/Oleksandr-Kliuiev/atera-mcp.git $dir
& "$dir\scripts\install-codex.ps1"

Requirements for all OSes: Git, Node.js 20+, and an installed Codex CLI. On Windows, the script runs from PowerShell; if the execution policy prevents local scripts, use powershell -ExecutionPolicy Bypass -File .\scripts\install-codex.ps1.

The installer installs dependencies, builds the server, and registers stdio MCP in Codex. Each employee adds only their own ATERA_API_TOKEN; there is no shared token in the repository. By default, writes and deletions are enabled; if necessary, they can be disabled via ATERA_WRITE_ENABLED=false and ATERA_ENABLE_DESTRUCTIVE_OPERATIONS=false.