MQ-Sentinel MCP server

MQ-Sentinel

<!-- mcp-name: io.github.pramodreddyboddu/mq-sentinel -->

Production-grade, read-only IBM MQ diagnostic MCP server that AI agents can safely use — with zero hallucinations.

I built this as a serious side project to solve a real, high-stakes problem in enterprise environments. It is now a strong public portfolio piece demonstrating systems engineering, security, observability, production deployment, and building safe infrastructure for AI agents.

0.3.0 — 8 diagnostic tools across all 10 IBM MQ flavors. Read-only by design. Prompt-injection firewall. OIDC + RBAC. Hash-chained audit. Verified IBM Knowledge Center citations (CI-enforced). Production Helm with HPA + air-gapped packaging.

GitHub: https://github.com/pramodreddyboddu/mq-sentinel Live Demo: https://mq-sentinel.io Get it in front of people: docs/LAUNCH.md

The Problem I Solved

Enterprise IBM MQ teams waste hours diagnosing issues like:

• 2035 NOT_AUTHORIZED storms
• Exploding DLQs
• Native HA replica lag and split-brain
• Stale cluster members
• z/OS mysteries

Traditional tools require deep expertise and manual log diving. Handing an LLM raw MQ access is unacceptable for security and compliance teams.

MQ-Sentinel gives Claude, Cursor, Grok, and other agents a safe MCP interface that returns accurate, cited diagnostics without ever hallucinating or executing destructive commands.

The Problem

IBM MQ teams (banks, telcos, insurance, gov) waste hours on:

• 2035 NOT_AUTHORIZED channel storms
• Exploding DLQs
• Native HA replica lag / split-brain
• Stale cluster members
• z/OS QSG mysteries

Traditional tools require deep MQSC knowledge and grepping logs. Giving an LLM direct MQ access is a non-starter for security/compliance teams.

MQ-Sentinel solves this by giving Claude, Cursor, Grok, etc. a safe, read-only MCP interface that returns typed Root Cause + Fix Steps + verified IBM docs — never fabricates, never executes destructive commands.

🎬 See it in 90 seconds

git clone https://github.com/pramodreddyboddu/mq-sentinel.git
cd mq-sentinel
make demo

Watch MQ-Sentinel diagnose a real 2035 NOT_AUTHORIZED, an INDOUBT channel, a 1247-message DLQ, and a Native HA replica disconnect — all against the bundled fixture sandbox. No live IBM MQ required.

&nbsp;

Want to record it for sharing? make demo-record produces a browser-playable asciinema cast.

Quick self-check (no MQ needed):

uv run mq-sentinel doctor
uv run mq-sentinel tools     # list all diagnostics
uv run mq-sentinel info      # overview + security highlights

Use it from Claude, Grok, Cursor, Gemini, ChatGPT

One MCP server — not a per-vendor plugin. Copy-paste configs: docs/mcp-clients.md.

List it where agents discover servers: official MCP Registry (server.json) + Smithery (smithery.yaml). ChatGPT needs a hosted HTTPS endpoint, not local stdio.

Architecture at a Glance

flowchart TB
    subgraph Client["MCP Client (Claude / Cursor / Grok)"]
        P[Prompt]
    end

Shortened. The full README is on GitHub.