ibm-openpages-local-mcp-server
by IBM
Overview
A local Model Context Protocol (MCP) server enabling AI agents to securely interact with IBM OpenPages GRC platform.
Installation
python start_mcp.pyEnvironment Variables
- OPENPAGES_BASE_URL
- OPENPAGES_AUTHENTICATION_TYPE
- OPENPAGES_USERNAME
- OPENPAGES_PASSWORD
- OPENPAGES_APIKEY
- OPENPAGES_AUTHENTICATION_URL
- SSL_VERIFY
- DEBUG
- LOG_LEVEL
Security Notes
Direct f-string concatenation of user-provided arguments (e.g., `name_filter`, `status_filter`, `sort_by` fields, `sort_by.order`) into SQL queries in `generic_object_tools.py` creates a significant SQL injection vulnerability. The `SSL_VERIFY` setting can be disabled for development, posing a risk if left `False` in production environments, potentially exposing traffic to eavesdropping.
Similar Servers
mcpo
Exposes Model Context Protocol (MCP) tools as OpenAPI-compatible HTTP servers.
kubernetes-mcp-server
Facilitates AI agent interaction with Kubernetes and OpenShift clusters by exposing management and observability tools via the Model Context Protocol.
mcp
Connect IBM products and other enterprise systems to AI agents via the Model Context Protocol (MCP) to enable AI models to interact with various local and remote resources.
ibmi-mcp-server
The IBM i MCP Server enables AI agents to monitor, administer, and query IBM i systems using SQL tools, supporting performance analysis, system administration, and security vulnerability assessment.