ibmz-mcp-server
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@ibmz-mcp-serverList all encryption keys in my Key Protect instance."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ibmz-mcp-server
MCP server for IBM Z mainframe integration. Provides HSM-backed key management via IBM Key Protect (FIPS 140-2 Level 3) and REST API access to mainframe programs (CICS, IMS, batch) via z/OS Connect.
Tools (12 total)
Key Protect -- HSM Key Management
Tool | Description |
| List encryption keys in Key Protect |
| Create root or standard keys |
| Get key details and metadata |
| Wrap (encrypt) a DEK with a root key |
| Unwrap (decrypt) a wrapped DEK |
| Rotate a root key |
| Delete a key (irreversible) |
| Get rotation and dual-auth policies |
z/OS Connect -- Mainframe Integration
Tool | Description |
| List available mainframe services |
| Get service details and OpenAPI spec |
| Call a mainframe program via REST (JSON to COBOL) |
| List outbound API configurations |
| Check z/OS Connect server health |
Related MCP server: Data Intelligence MCP Server
Install
npm installConfiguration
{
"mcpServers": {
"ibmz": {
"type": "stdio",
"command": "node",
"args": ["/path/to/ibmz-mcp-server/index.js"],
"env": {
"IBM_CLOUD_API_KEY": "your-api-key",
"KEY_PROTECT_INSTANCE_ID": "your-instance-id",
"KEY_PROTECT_URL": "https://us-south.kms.cloud.ibm.com"
}
}
}
}Environment Variables
Variable | Description | Required |
| IBM Cloud API key | Yes (Key Protect) |
| Key Protect instance OCID | Yes (Key Protect) |
| Key Protect endpoint | No (defaults to us-south) |
| z/OS Connect base URL | Yes (z/OS Connect) |
| Mainframe username | Yes (z/OS Connect) |
| Mainframe password | Yes (z/OS Connect) |
Key Concepts
Envelope Encryption
Root keys (KEK) are stored in the HSM and never leave the hardware. Data encryption keys (DEK) are wrapped by root keys for safe storage alongside ciphertext.
z/OS Connect
REST APIs that automatically map JSON payloads to COBOL copybooks, enabling access to CICS transactions, IMS programs, and batch jobs.
Dependencies
@modelcontextprotocol/sdk-- MCP protocol SDK@ibm-cloud/ibm-key-protect-- Key Protect clientibm-cloud-sdk-core-- IBM Cloud authentication
License
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- Alicense-qualityDmaintenancehe Maximo MCP Server bridges AI agents (Claude, Cursor, Antigravity) with your IBM Maximo environment. It empowers your AI to autonomously discover Object Structures (APIs), inspect schemas, and query live data via OSLC. Instead of hallucinating field names, the AI validates queries instantly and caLast updated598Apache 2.0

Data Intelligence MCP Serverofficial
Alicense-qualityCmaintenanceProvides a modular MCP server to integrate with IBM Data Intelligence services, enabling secure interaction with data intelligence capabilities via tools and skills.Last updated19Apache 2.0- Alicense-quality-maintenanceConnects legacy COBOL mainframe systems to modern AI governance via MCP, with tools for parsing copybooks, assessing CICS, scanning JCL, mapping VSAM, and translating EBCDIC.Last updated1MIT
- Flicense-qualityBmaintenanceMCP server for IBM Technology Zone: manage reservations end-to-end and search the catalog from Claude.Last updated
Related MCP Connectors
MCP Server for agents to onboard, pay, and provision services autonomously with InFlow
A paid remote MCP for HyperFrames, built to return verdicts, receipts, usage logs, and audit-ready J
A paid remote MCP for ZeroID, built to return verdicts, receipts, usage logs, and audit-ready JSON.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ExpertVagabond/ibmz-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server