ibmi-mcp-server

The server employs robust security measures: It uses environment variables for sensitive credentials (DB2i_HOST, DB2i_USER, DB2i_PASS), preventing hardcoded secrets. SQL execution is rigorously validated against a list of forbidden keywords (e.g., 'TRUNCATE', 'DELETE', 'DROP') using both AST parsing and regex to prevent SQL injection and dangerous operations. The system supports multiple authentication strategies (IBMiToken, JWT, OAuth) with configurable key paths and token expiry. It also implements rate limiting and input sanitization, and explicitly flags potentially destructive tools with `destructiveHint: true` for agent awareness. These comprehensive measures make it highly secure for its intended purpose of exposing IBM i services to AI agents.