IBM Concert MCP Server

Item: IBM Concert MCP Server
Rating: 69
Author: M8ven

A Model Context Protocol server that connects AI agents to IBM Concert, enabling autonomous workflow health monitoring, incident diagnosis, auto-remediation, CVE triage, and Slack alerting through natural language.

→ riminator/ibm-concert-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: SUPABASE_PUBLISHABLE_KEY, SUPABASE_SECRET_KEY, CONCERT_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configFEEDBACK_STORE

configSUPABASE_URL— Supabase project URL (incident DB + knowledge RAG)

🔐 secretSUPABASE_PUBLISHABLE_KEY— Supabase anon/publishable key

🔐 secretSUPABASE_SECRET_KEY

configMCP_HOST— 127.0.0.1 Host for SSE/HTTP transport

configMCP_PORT— 8000 Port for SSE/HTTP transport (workflow monitor)

configMCP_TRANSPORT— stdio stdio \ sse \ streamable-http

configCONCERT_BASE_URL— TechZone gateway Concert Workflows gateway URL

configCONCERT_REST_BASE_URL— TechZone host Concert main host (for CVE/ingestion API)

🔐 secretCONCERT_API_KEY— IBM Concert API key (base64-encoded user:token)

configCONCERT_INSTANCE_ID— Concert instance UUID (for CVE API)

configSLACK_WEBHOOK_URL— Slack Incoming Webhook URL

configREQUEST_TIMEOUT_SECONDS

configRECOVERY_TIMEOUT_SECONDS— 90 How long to wait for recovery after oc restart

configALERT_ON_WARNING— false Also alert on HTTP 200 empty-body (warning) responses

configAUTO_SLACK— true Auto-post Slack alerts on diagnosis/resolution

configVERIFY_TLS— false Verify TLS certificates

configOC_NAMESPACE— concert-workflows OpenShift namespace for oc remediation

configRUNBOOK_DIR— ./runbooks Directory where auto-generated runbooks are written

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/riminator-ibm-concert-mcp-1ktyob)](https://m8ven.ai/mcp/riminator-ibm-concert-mcp-1ktyob)

commit: a3e5019fb7611dfc26cda88a5ac52c3c43bc0f6d

code hash: 895aa0822d605b6fc2ba6ed1855a55b17c7535e0dfae0c64298ae307eaa39948

verified: 7/14/2026, 8:35:24 AM

view raw JSON →