ibm-mq-mcp 0.5.0
0.5.0 - 2026-08-05
Bug Fixes
-
sec-001: Apply abuse limits before bearer auth on remote MCP 81a7f59
-
adm-003: Reject MQSC newline injection and redact JSON command 8d38649
Features
-
sec-001: Opt-in remote MCP bearer gate and abuse limits 3776967
-
adm-003: Exceptional MQSC tool behind double opt-in e443ef9
Container image
ghcr.io/platformrelay/ibm-mq-mcp:0.5.0
Multi-arch (linux/amd64, linux/arm64), distroless nonroot base. Runs the MCP server over stdio.
OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/PlatformRelay/IBM-MQ-MCP-Server/.+' \
ghcr.io/platformrelay/ibm-mq-mcp@sha256:dcc7572039ffec928ad0a4417493a40056c74932e5b801fe5c5a03a2e529871fStandalone binary
Download the tarball for your platform from the assets below, extract ibm-mq-mcp, and run:
./ibm-mq-mcpVerify checksums with sha256sum -c checksums.txt.