Edir Ldap

Read-only MCP server for NetIQ eDirectory and Identity Manager (IDM).

Provides Claude Code (or any MCP client) with tools to search the directory, read entries, inspect schema, and query IDM driver state.

Install

pip install git+https://github.com/jcombs-pointblue/edir-ldap-mcp.git

Or for development:

git clone https://github.com/jcombs-pointblue/edir-ldap-mcp.git
cd edir-ldap-mcp
pip install -e .

Configuration

Add the server to your .claude.json or project settings, providing the LDAP connection details as environment variables:

{
  "mcpServers": {
    "edir-ldap": {
      "command": "edir-ldap-mcp",
      "env": {
        "LDAP_HOST": "192.168.1.100",
        "LDAP_PORT": "636",
        "LDAP_BIND_DN": "cn=admin,ou=sa,o=system",
        "LDAP_BIND_PASSWORD": "changeme",
        "LDAP_USE_TLS": "true",
        "LDAP_VERIFY_CERT": "false"
      }
    }
  }
}

Variable	Default	Description
LDAP_HOST	(required)	Hostname or IP of the eDirectory server
LDAP_PORT	636	LDAP port
LDAP_BIND_DN	(required)	Bind DN (e.g. cn=admin,ou=sa,o=system)
LDAP_BIND_PASSWORD	(required)	Bind password
LDAP_USE_TLS	true	Use LDAPS
LDAP_VERIFY_CERT	true	Verify TLS certificate

Example

Querying IDM driver states from Claude Code:

Tools

Tool	Description
ldap_search	Search the directory with filter, scope, and attribute control
ldap_get_entry	Read a single entry by DN
ldap_get_schema	List object classes or get details for a specific class
idm_get_driver_state	Read IDM driver state attributes
idm_get_driver_set	List all drivers in an IDM Driver Set
idm_find_associations	Find objects associated with a specific IDM driver

License

MIT