CIB Seven MCP Server
Provides OIDC client credentials authentication with automatic token refresh for securing connections to CIB Seven REST APIs, supporting realm-based configuration and secure credential management.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@CIB Seven MCP ServerWhy is process abc-123 stuck?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
cib7-mcp
MCP tool for investigating CIB Seven process instances. Gives Claude comprehensive knowledge of CIB Seven REST APIs with live execution and Keycloak authentication.
Features
7 investigation tools — process instances, incidents, activity history, variables, BPMN XML, jobs
Semantic descriptions — Claude understands what each field means operationally, not just raw endpoint data
BPMN introspection — fetch process definition XML, Claude reasons about expected vs actual execution path
Keycloak auth — OIDC client credentials flow with automatic token refresh
Variable redaction — configurable regex patterns to hide sensitive data
Diagnostic prompts —
diagnose_stuck_processandincident_reportworkflows
Installation
Claude Desktop
Add to your claude_desktop_config.json:
{
"mcpServers": {
"cib7": {
"command": "npx",
"args": ["cib7-mcp"],
"env": {
"CIB7_URL": "http://localhost:6009/rest"
}
}
}
}Claude Code
claude mcp add cib7-mcp -- npx cib7-mcpThen set the environment variable CIB7_URL to your CIB Seven instance.
Configuration
All configuration is via environment variables.
Variable | Required | Description |
| Yes | CIB Seven REST API URL (e.g., |
| No | Keycloak server URL (e.g., |
| No | Keycloak realm name |
| No | Keycloak client ID |
| No | Keycloak client secret |
| No | Comma-delimited regex patterns for variable redaction (e.g., |
If any KEYCLOAK_* variable is set, all four must be provided. If none are set, the tool runs in unauthenticated mode.
With Keycloak
{
"mcpServers": {
"cib7": {
"command": "npx",
"args": ["cib7-mcp"],
"env": {
"CIB7_URL": "https://your-instance.com/rest",
"KEYCLOAK_URL": "https://your-keycloak.com",
"KEYCLOAK_REALM": "your-realm",
"KEYCLOAK_CLIENT_ID": "mcp-client",
"KEYCLOAK_CLIENT_SECRET": "your-secret",
"CIB7_REDACT_PATTERNS": "password.*,secret.*,token.*,creditCard.*"
}
}
}
}Tools
Tool | Description |
| Look up a process instance by ID — state, definition, business key |
| Search process instances by definition key, business key, or state |
| List open incidents, optionally filtered by process instance |
| Execution trace — every activity that ran, in order |
| All variables for a process instance (with redaction) |
| BPMN XML model (diagram elements stripped for readability) |
| Job execution details — retries, exception messages |
Prompts
Prompt | Description |
| Step-by-step diagnostic for a stuck process instance |
| Comprehensive report of all open incidents with root cause analysis |
Example Usage
Ask Claude:
"Is process
abc-123stuck?""Show me all open incidents"
"What's the BPMN definition for process definition
orderProcess:1:456?""Generate an incident report"
Development
npm install
npm run build
npm testRequires Node.js 18+.
License
MIT
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/krixerx/cib7-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server