CIB Seven MCP Plugin

Status: Early Development This plugin is in early development and has not yet been tested with a real CIB Seven deployment. It is not published to any Maven repository yet. To use it, build from source with mvn clean install. Expect breaking changes until v1.0.0 is released.

A Spring Boot starter that embeds a Model Context Protocol (MCP) server directly into your CIB Seven Community Edition deployment. AI clients like Claude Desktop can connect and query live process data, diagnose stuck processes, and perform controlled write operations.

Quick Start

1. Build from source

git clone https://github.com/cibseven/cibseven-mcp-plugin.git
cd cibseven-mcp-plugin
mvn clean install

2. Add the dependency

<dependency>
    <groupId>org.cibseven.mcp</groupId>
    <artifactId>cib7-mcp-spring-boot-starter</artifactId>
    <version>1.0.0-SNAPSHOT</version>
</dependency>

3. Start your CIB Seven application

The plugin activates automatically when a ProcessEngine bean is present. No annotation required.

4. Connect Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "cib7": {
      "type": "sse",
      "url": "http://localhost:8080/mcp/sse"
    }
  }
}

5. Ask questions

"Why is process invoice-approval stuck since yesterday?"

The AI will correlate across process state, activity history, incidents, variables, and logs to give you a complete answer.

Features

MCP Tools (11)

Tool	Description
list_process_instances	Filter by definition key, status, business key
get_process_instance	Full details for one process instance
list_activity_instances	Execution path with timestamps
list_incidents	Failed jobs and external tasks
get_process_variables	Variables with sensitive value redaction
query_history	Date range and business key filtering
count_process_instances	Counts grouped by state
query_rest_resource	Query operator-defined REST endpoints
get_recent_logs	Application logs from in-memory buffer
retry_failed_job	Retry with two-step confirmation (write)
restart_process_instance	Restart with two-step confirmation (write)

MCP Resources

• process_definitions - All deployed BPMN process definitions
• bpmn_xml - BPMN XML with diagram layout stripped for readability

MCP Prompts

• diagnose_stuck_process - Step-by-step diagnostic workflow
• incident_report - Summary of all open incidents

Configuration

# Core (all optional - works with zero config)
cib7.mcp.enabled=true
cib7.mcp.server-name=cib7-mcp-server

# Write operations (disabled by default)
cib7.mcp.write-operations.enabled=true

# Log buffer
cib7.mcp.logs.buffer-size=2000

# Custom REST resources
cib7.mcp.resources[0].name=invoice_audit_log
cib7.mcp.resources[0].description=Tracks invoice status changes
cib7.mcp.resources[0].endpoint=/api/mcp/invoice-audit-log
cib7.mcp.resources[0].method=GET

# Variable redaction (defaults cover password, secret, token)
cib7.mcp.security.redact-variable-patterns=.*[Pp]assword,.*[Ss]ecret,.*[Tt]oken

Security

• Zero SQL execution - All data access via Camunda Java API or whitelisted REST endpoints
• Variable redaction - Sensitive values automatically replaced with [REDACTED]
• Write confirmation - Two-step flow: preview first, execute only with explicit confirmation
• No auth opinions - Your Spring Security configuration controls access to /mcp/*

Architecture

Spring Boot Application (JVM)
+----------------------------------+  +----------------------------------+
| CIB Seven Engine                 |  | cib7-mcp-spring-boot-starter     |
|                                  |  |                                  |
| RuntimeService  ─────────────────+──+─> ProcessQueryTools              |
| HistoryService                   |  |   IncidentTools                  |
| ManagementService                |  |   WriteOperationTools            |
+----------------------------------+  |   LogQueryTools                  |
                                      |   RestResourceTools              |
+----------------------------------+  |                                  |
| Logback Context (ring buffer) ───+──+─> /mcp/sse  /mcp/message        |
+----------------------------------+  +----------------------------------+
                                           |
                                      Claude Desktop / AI Chatbot

Requirements

• Java 17+
• Spring Boot 3.5+
• CIB Seven 2.1+

License

Apache License 2.0