rocketchat-mcp
An MCP server for Rocket.Chat. It lets MCP clients (Claude Desktop, Cursor, Claude Code, etc.) send and read messages, send DMs, search history, upload/download files, and manage channels on a Rocket.Chat workspace over stdio.
Actively maintained fork of elieworkspace/rocketchat-mcp, adding Personal Access Token auth, more tools, and reliability/security improvements. See NOTICE for attribution.
Tools
| Tool | Description |
|---|---|
send_message_in_channel |
Send a message to a channel |
send_direct_message |
Send a direct message to a user |
delete_message |
Delete a message (your own, unless the role has force-delete) |
get_channel_messages |
Read history of a channel/group/DM; supports offset paging and accepts a room ID or name |
search_messages |
Keyword search within a room (chat.search) |
get_unread |
List rooms with unread messages and their latest content |
send_file |
Upload a file to a channel or @user |
download_attachment |
Download a message's attachments to local files |
list_all_rooms |
List channels, groups and DMs ∗ |
list_users |
List users ∗ |
get_user_info |
Get a user's profile |
create_channel |
Create a channel |
∗ list_all_rooms and list_users call workspace-wide endpoints
(channels.list / users.list) that require admin or the corresponding
view-* permission. Every other tool works for a normal chat user.
Authentication
A normal chat user is enough for the core tools. A Personal Access Token is recommended — it keeps the token out of process arguments:
| Variable | Description |
|---|---|
ROCKETCHAT_SERVER_URL |
Workspace URL, e.g. https://chat.example.com |
ROCKETCHAT_USER_ID |
Your Rocket.Chat user ID |
ROCKETCHAT_AUTH_TOKEN |
Personal Access Token |
ROCKETCHAT_WATCHDOG_INTERVAL |
(optional) orphan-watchdog interval in seconds, default 60 |
Username/password is also supported via --username / --password.
Use --no-verify-ssl for self-signed certificates.
Usage
Run with uvx (no clone)
uvx --from git+https://github.com/millerchou/rocketchat-mcp rocketchat-mcp \
--server-url https://chat.example.com
Once published to PyPI this becomes simply uvx rocketchat-mcp.
Client configuration
{
"mcpServers": {
"rocketchat": {
"command": "uvx",
"args": ["--from", "git+https://github.com/millerchou/rocketchat-mcp", "rocketchat-mcp"],
"env": {
"ROCKETCHAT_SERVER_URL": "https://chat.example.com",
"ROCKETCHAT_USER_ID": "your_user_id",
"ROCKETCHAT_AUTH_TOKEN": "your_personal_access_token"
}
}
}
}
Local development
git clone https://github.com/millerchou/rocketchat-mcp
cd rocketchat-mcp
uv run rocketchat.py --server-url https://chat.example.com \
--auth-token "$ROCKETCHAT_AUTH_TOKEN" --user-id "$ROCKETCHAT_USER_ID"
Reliability
Persistent HTTP connection pool, room-endpoint caching, log rotation (1 MB), and an orphan watchdog that self-exits when the MCP client process dies.
License
Modifications in this fork are released under the MIT License. This is a fork of upstream code originally published without a license; see NOTICE for details.
Metadata
Release files for rocketchat-mcp 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| rocketchat_mcp-0.1.0.tar.gz | 44.3 kB | With provenance | Details for rocketchat_mcp-0.1.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| rocketchat_mcp-0.1.0-py3-none-any.whl | Python 3 | none | any | Details for rocketchat_mcp-0.1.0-py3-none-any.whl |
Total release size: 56.6 kB
Release files / rocketchat_mcp-0.1.0.tar.gz
| Download URL | rocketchat_mcp-0.1.0.tar.gz |
|---|---|
| Size | 44.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
2ea6db23d53aa6686d6f948671b11deed3348a95e6b99717b6553ded56db0900
|
|
BLAKE2b-256 checksum How to use checksums |
e97c20d9af797d48561e5f533c160f4a5f36fe85f6aa30dc53518c9921364a8c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 16, 2026.
Transparency logRelease files / rocketchat_mcp-0.1.0-py3-none-any.whl
| Download URL | rocketchat_mcp-0.1.0-py3-none-any.whl |
|---|---|
| Size | 12.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
b21f998f59821993e70a7637a8d83f285255578d4b90a746ced1970c11693bec
|
|
BLAKE2b-256 checksum How to use checksums |
9cdee2d26cdf3dd73f973a73817c6a4e2e4d8716560fe295281bd4575cb6c18c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 16, 2026.
Transparency logSecurity for rocketchat-mcp 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for rocketchat_mcp-0.1.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 16, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.