cto-nexus-mcp-server
Read-only MCP server for searching Nexus Repository Manager 3.
Tools
| Tool | Description |
|---|---|
list_repositories |
List all visible repositories |
search_components |
Search components (Docker, Maven, npm, PyPI…) by name/group/version/format |
search_docker_tags |
List Docker image tags for a given image, newest first |
find_docker_image |
Auto-discover a Docker image by base name, probing known namespace prefixes (oas/, orbis-u/, hdc/, local/, none) |
get_latest_version |
Get the single latest version of a component |
Every tool takes host as first parameter (Nexus hostname, defaults to registry-nexus.orbis.dedalus.com). Only override if targeting a different Nexus instance — do not set it to a repository name.Credentials (NEXUS_USER / NEXUS_PASSWORD) are injected via ExternalSecret from AWS Secrets Manager (nexus/dev/credentials).
Build & push
# Build
docker build --tag 10.244.20.62:8081/local-docker-repository/cto-nexus-mcp-server:latest .
# Push
docker push 10.244.20.62:8081/local-docker-repository/cto-nexus-mcp-server:latest
AWS Secret (first-time setup)
aws secretsmanager create-secret \
--name nexus/dev/credentials \
--secret-string '{"user":"<nexus-user>","password":"<nexus-password>"}' \
--region eu-central-1
Architecture
Client → NGF (nginx-gateway) → Kong (key-auth) → nexus-mcp-server:8000/mcp
↓
Nexus REST API v1 (GET only)
https://<host>/service/rest/v1/
Environment variables
| Variable | Description | Default |
|---|---|---|
NEXUS_USER |
Nexus username (from secret) | — |
NEXUS_PASSWORD |
Nexus password (from secret) | — |
OTEL_EXPORTER_OTLP_ENDPOINT |
OTel collector endpoint | http://otel-collector...4317 |
OTEL_SERVICE_NAME |
Service name for traces/logs | nexus-mcp-server |
OTEL_RESOURCE_ATTRIBUTES |
Extra OTel resource attributes | — |
LOG_LEVEL |
Log level | INFO |
