Ibmz

IBM Z mainframe MCP server - Key Protect HSM & z/OS

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

One-click editor setup isn’t available for this listing yet — we don’t have a confirmed install command, and we’d rather show nothing than point your editor at the wrong package or host. Follow the project’s own setup instructions, linked above.

Manual Client & Custom JSON ConfigExpand JSON ▾

No confirmed setup config for this listing yet. We only publish a config block when the install details come from the project itself — its README, its docs, or a verified owner. We haven’t found those for ibmz, and we’d rather show nothing than a guess you’d paste into your client. Follow the project’s own setup instructions for the current steps.

Capabilities & Tool Schemas (13)Self-reported

Inspect callable tools, capabilities, and parameters exposed to AI agents by Ibmz.

key_protect_list_keys

List encryption keys in Key Protect

key_protect_create_key

Create root or standard keys

key_protect_get_key

Get key details and metadata

key_protect_wrap_key

Wrap (encrypt) a DEK with a root key

key_protect_unwrap_key

Unwrap (decrypt) a wrapped DEK

key_protect_rotate_key

Rotate a root key

Documentation Overview

ibmz-mcp-server

[!License: MIT](https://opensource.org/licenses/MIT) [!MCP](https://modelcontextprotocol.io) [!npm](https://www.npmjs.com/package/ibmz-mcp-server)

MCP server for IBM Z mainframe integration. Provides HSM-backed key management via IBM Key Protect (FIPS 140-2 Level 3) and REST API access to mainframe programs (CICS, IMS, batch) via z/OS Connect.

Tools (12 total)

Key Protect -- HSM Key Management

Tool	Description
`key_protect_list_keys`	List encryption keys in Key Protect
`key_protect_create_key`	Create root or standard keys
`key_protect_get_key`	Get key details and metadata
`key_protect_wrap_key`	Wrap (encrypt) a DEK with a root key
`key_protect_unwrap_key`	Unwrap (decrypt) a wrapped DEK
`key_protect_rotate_key`	Rotate a root key
`key_protect_delete_key`	Delete a key (irreversible)
`key_protect_get_key_policies`	Get rotation and dual-auth policies

z/OS Connect -- Mainframe Integration

Tool	Description
`zos_connect_list_services`	List available mainframe services
`zos_connect_get_service`	Get service details and OpenAPI spec
`zos_connect_call_service`	Call a mainframe program via REST (JSON to COBOL)
`zos_connect_list_apis`	List outbound API configurations
`zos_connect_health`	Check z/OS Connect server health

Install

Terminal

npm install

Configuration

config.json

{
  "mcpServers": {
    "ibmz": {
      "type": "stdio",
      "command": "node",
      "args": ["/path/to/ibmz-mcp-server/index.js"],
      "env": {
        "IBM_CLOUD_API_KEY": "your-api-key",
        "KEY_PROTECT_INSTANCE_ID": "your-instance-id",
        "KEY_PROTECT_URL": "https://us-south.kms.cloud.ibm.com"
      }
    }
  }
}

Environment Variables

Variable	Description	Required
`IBM_CLOUD_API_KEY`	IBM Cloud API key	Yes (Key Protect)
`KEY_PROTECT_INSTANCE_ID`	Key Protect instance OCID	Yes (Key Protect)
`KEY_PROTECT_URL`	Key Protect endpoint	No (defaults to us-south)
`ZOS_CONNECT_URL`	z/OS Connect base URL	Yes (z/OS Connect)
`ZOS_CONNECT_USERNAME`	Mainframe username	Yes (z/OS Connect)
`ZOS_CONNECT_PASSWORD`	Mainframe password	Yes (z/OS Connect)

Key Concepts

Envelope Encryption

Root keys (KEK) are stored in the HSM and never leave the hardware. Data encryption keys (DEK) are wrapped by root keys for safe storage alongside ciphertext.

z/OS Connect

REST APIs that automatically map JSON payloads to COBOL copybooks, enabling access to CICS transactions, IMS programs, and batch jobs.

Dependencies

@modelcontextprotocol/sdk -- MCP protocol SDK
@ibm-cloud/ibm-key-protect -- Key Protect client
ibm-cloud-sdk-core -- IBM Cloud authentication

License

MIT

Read the full README →View source on GitHub →

Related MCP Servers

View all in Security View all alternatives

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

Last commit

17d ago

Most recent push to the default branch.

Tools exposed

Callable tools this server registers over MCP.

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about Ibmz

We don't have a confirmed install command for ibmz yet, so we don't publish a generated one — a guessed package name would point at the wrong package or none at all. Follow the project's own README or setup instructions (https://github.com/ExpertVagabond/ibmz-mcp-server.git) for the current steps.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/ibmz?style=directory)](https://allmcps.com/mcp/ibmz)

HTML Embed

<a href="https://allmcps.com/mcp/ibmz"><img src="https://allmcps.com/api/badge/ibmz?style=directory" alt="Ibmz on AllMCPs" /></a>

Technical Specs & Signals

CategorySecurity

14/14 checks healthy over the last 46d

44Quality signal: Fair · 44/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools19/30

Adoption & activity4/15

Community engagement0/10

A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

★ Spotlight Slot

Feature Your MCP Server

Get maximum visibility for your server across our directory, search results, and detail pages.

Spotlight Your Server

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge — proof is checked automatically, then reviewed by our team.

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 🔒 Security →Best MCP servers for Security →Alternatives to Ibmz →Install in Claude Desktop Install in Cursor Install in VS Code Setup guides for all 13 MCP clients