/ 100

24 days ago

glama

IBM Content Services MCP Server

Item: IBM Content Services MCP Server
Rating: 54
Author: M8ven

Enables AI models to access IBM FileNet Content Manager capabilities including document management, property extraction, legal holds, and AI-powered document insight through standardized MCP interfaces.

→ ahamedfo/ibm-content-services-mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

3 tools describe read intent but their handlers mutate — create_document (line 237: document_properties.eval()); create_folder (line 111: folder_properties.eval()); update_folder (line 531: folder_properties.eval())

✅

46 tools verified — handlers match their declared behaviour

3 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 4 credentials: PASSWORD, CLIENT_SECRET, ZENIAM_IAM_CLIENT_SECRET, ZENIAM_IAM_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configLOG_LEVEL— Logging level for the server. Valid values: DEBUG, INFO, WARNING, ERROR, CRITICAL INFO

configSERVER_URL— Content Services GraphQL API endpoint URL (required) -

🔐 secretPASSWORD— Authentication password (required) -

configSSL_ENABLED— Whether SSL is enabled. Can be set to true, a path to a certificate file, or false (not recommended for production) true

configTOKEN_SSL_ENABLED— Whether SSL is enabled for token endpoint. Can be set to true, a path to a certificate file, or false (not recommended for production) true

configOBJECT_STORE— Object store identifier (required) -

configTOKEN_REFRESH— Token refresh interval in seconds 1800

configLOCALE

configTOKEN_URL— OAuth token URL -

configGRANT_TYPE— OAuth grant type -

configSCOPE— OAuth scope -

configCLIENT_ID— OAuth client ID -

🔐 secretCLIENT_SECRET— OAuth client secret -

configZENIAM_ZEN_URL— Zen url to send IAM token for exchange to Zen token, for example: <zen_host_route>/v1/preauth/validateAuth -

configZENIAM_IAM_URL— IAM url to send user/pwd or client_id/client_secret to IAM to get back IAM token, for example: <iam_host_route>/idprovider/v1/auth/identitytoken -

configZENIAM_IAM_SSL_ENABLED— Whether SSL is enabled for IAM route. Can be set to true, a path to a certificate file, or false (not recommended for production) true

configZENIAM_IAM_GRANT_TYPE— IAM grant type -

configZENIAM_IAM_SCOPE— IAM scope -

configZENIAM_IAM_CLIENT_ID

🔐 secretZENIAM_IAM_CLIENT_SECRET

configZENIAM_IAM_USER— if grant type is password, specify the IAM user -

🔐 secretZENIAM_IAM_PASSWORD— if grant type is password, specify the IAM password -

configZENIAM_ZEN_SSL_ENABLED— Whether SSL is enabled for Zen exchange route. Can be set to true, a path to a certificate file, or false (not recommended for production) true

configREQUEST_TIMEOUT— Request timeout in seconds 30.0

configPOOL_CONNECTIONS— Number of connection pool connections 100

configPOOL_MAXSIZE— Maximum pool size 100

configRESOURCES_FOLDER— /custom/path # Override default folder path

configMAX_CHUNKS

configGENAI_LLM_MODEL_NAME

configRELEVANCE_SCORE

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/ahamedfo-ibm-content-services-mcp-server-66l2zv)](https://m8ven.ai/mcp/ahamedfo-ibm-content-services-mcp-server-66l2zv)

commit: fb05b2b82dd812f180668582f1baecffa1d99b84

code hash: 829214ba879b3a7baef5f2d6281778b1118ccca0c40f0dee1b2b1661b814593b

verified: 7/7/2026, 9:50:38 AM

view raw JSON →