{
  "markdown": "# ibmz-mcp-server\n\n[\\![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n[\\![MCP](https://img.shields.io/badge/MCP-Compatible-blue.svg)](https://modelcontextprotocol.io)\n[\\![npm](https://img.shields.io/badge/npm-ibmz--mcp--server-red.svg)](https://www.npmjs.com/package/ibmz-mcp-server)\n\nMCP server for IBM Z mainframe integration. Provides HSM-backed key management via IBM Key Protect (FIPS 140-2 Level 3) and REST API access to mainframe programs (CICS, IMS, batch) via z/OS Connect.\n\n## Tools (12 total)\n\n### Key Protect -- HSM Key Management\n\n| Tool | Description |\n|------|-------------|\n| `key_protect_list_keys` | List encryption keys in Key Protect |\n| `key_protect_create_key` | Create root or standard keys |\n| `key_protect_get_key` | Get key details and metadata |\n| `key_protect_wrap_key` | Wrap (encrypt) a DEK with a root key |\n| `key_protect_unwrap_key` | Unwrap (decrypt) a wrapped DEK |\n| `key_protect_rotate_key` | Rotate a root key |\n| `key_protect_delete_key` | Delete a key (irreversible) |\n| `key_protect_get_key_policies` | Get rotation and dual-auth policies |\n\n### z/OS Connect -- Mainframe Integration\n\n| Tool | Description |\n|------|-------------|\n| `zos_connect_list_services` | List available mainframe services |\n| `zos_connect_get_service` | Get service details and OpenAPI spec |\n| `zos_connect_call_service` | Call a mainframe program via REST (JSON to COBOL) |\n| `zos_connect_list_apis` | List outbound API configurations |\n| `zos_connect_health` | Check z/OS Connect server health |\n\n## Install\n\n```bash\nnpm install\n```\n\n## Configuration\n\n```json\n{\n  \"mcpServers\": {\n    \"ibmz\": {\n      \"type\": \"stdio\",\n      \"command\": \"node\",\n      \"args\": [\"/path/to/ibmz-mcp-server/index.js\"],\n      \"env\": {\n        \"IBM_CLOUD_API_KEY\": \"your-api-key\",\n        \"KEY_PROTECT_INSTANCE_ID\": \"your-instance-id\",\n        \"KEY_PROTECT_URL\": \"https://us-south.kms.cloud.ibm.com\"\n      }\n    }\n  }\n}\n```\n\n### Environment Variables\n\n| Variable | Description | Required |\n|----------|-------------|----------|\n| `IBM_CLOUD_API_KEY` | IBM Cloud API key | Yes (Key Protect) |\n| `KEY_PROTECT_INSTANCE_ID` | Key Protect instance OCID | Yes (Key Protect) |\n| `KEY_PROTECT_URL` | Key Protect endpoint | No (defaults to us-south) |\n| `ZOS_CONNECT_URL` | z/OS Connect base URL | Yes (z/OS Connect) |\n| `ZOS_CONNECT_USERNAME` | Mainframe username | Yes (z/OS Connect) |\n| `ZOS_CONNECT_PASSWORD` | Mainframe password | Yes (z/OS Connect) |\n\n## Key Concepts\n\n### Envelope Encryption\n\nRoot keys (KEK) are stored in the HSM and never leave the hardware. Data encryption keys (DEK) are wrapped by root keys for safe storage alongside ciphertext.\n\n### z/OS Connect\n\nREST APIs that automatically map JSON payloads to COBOL copybooks, enabling access to CICS transactions, IMS programs, and batch jobs.\n\n## Dependencies\n\n- `@modelcontextprotocol/sdk` -- MCP protocol SDK\n- `@ibm-cloud/ibm-key-protect` -- Key Protect client\n- `ibm-cloud-sdk-core` -- IBM Cloud authentication\n\n## License\n\n[MIT](LICENSE)\n",
  "bytes": 3056,
  "sha": "2d1fb9859b41d2e9d50df2ff5c89eb641dcdb7d0439ed5c9e01d4e9ba63e8a55",
  "repo_slug": "expertvagabond/ibmz-mcp-server",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_expertvagabond_ibmz_d33ff8e3/readme"
}