Mainframe MCP Server
개요
제작자가 쓴 설명(영어 원문)
MCP server for IBM z/OS jobs, datasets, USS, and operational diagnostics via Zowe SDK.
PopNx MCP의 세 기둥
이 세 가지는 절대 하나의 점수로 합치지 않아요. 의견, 측정, 인기는 서로 다른 것이니까요.
- 사용자 의견i아직 리뷰가 없어요리뷰는 다음 단계에서 계정 기능과 함께 열려요
- 우리의 기본 점검i1개 중 1개 통과공개된 정보로 점검했으며, 코드는 아직 스캔하지 않았어요
- 사용 정도i아주 새로움↓ 62/주 · ★ –
할 수 있는 일
이 서버는 아직 쉬운 말로 된 요약을 쓰지 못했어요. 아래는 레지스트리에서 읽어 온 사실이에요.
- 연결 방식: 내 컴퓨터에서 실행
- 전송 방식: stdio
- 카테고리: 데이터베이스 및 데이터셋
- 입력해야 할 값: ZOSMF_HOST, ZOSMF_PASSWORD, ZOSMF_TOKEN
설치
쓰고 있는 AI 앱을 고른 다음 설정을 복사하세요.
설치하기 전에
- 기본 점검: 1개 중 1개 통과
- 내 컴퓨터에서 내 사용자 계정의 권한(파일, 네트워크, 앱)으로 실행돼요.
- 직접 입력할 값:
ZOSMF_HOST,ZOSMF_PORT,ZOSMF_BASE_PATH,ZOSMF_USER,ZOSMF_PASSWORD,ZOSMF_TOKEN,ZOSMF_TOKEN_TYPE,ZOSMF_REJECT_UNAUTHORIZED,ZOSMF_CERT,ZOSMF_CERT_KEY,ZOSMF_TOKEN_FILE,ZOSMF_USER_ID,ZOSMF_PASSTICKET_APP,ZOWE_TEAM_CONFIG,ZOSMF_PROFILE,LOG_LEVEL,MCP_TRANSPORT,MCP_SSE_PORT,MAX_JOB_OUTPUT_LINES,MAX_DATASET_READ_LINES,MAX_JES_SPOOL_FILES,MAX_AUDIT_LINES,CMCI_CONTEXT,CMCI_HOST,CMCI_PORT,CMCI_BASE_PATH,DB2_LOCATION,DB2_HOST,DB2_PORT,DB2_BASE_PATH,SMF_SUMMARY_DATASET,RMF_METRICS_ENABLED,RACF_AUDIT_USS_PATH,RACF_AUDIT_DATASET,SECURITY_READ_ONLY,SECURITY_ALLOWED_TOOLS,SECURITY_BLOCKED_TOOLS,SECURITY_ALLOWED_DATASET_PATTERNS,SECURITY_ALLOWED_USS_PATHS,SECURITY_AUDIT_LOGGING,SECURITY_MAX_JCL_BYTES,SECURITY_WRITE_APPROVAL,SECURITY_JCL_SCAN,SECURITY_JCL_SCAN_STRICT,SECURITY_BLOCKED_PROGRAMS,SECURITY_BLOCKED_JOB_CLASSES,SECURITY_CHANGE_TICKET_PATTERN,SECURITY_WRITE_WINDOW,SECURITY_WRITE_DAYS,SECURITY_WRITE_WINDOW_TZ
비밀로 표시된 값은 내 계정의 열쇠예요. 절대 다른 사람과 공유하거나 채팅에 붙여 넣지 마세요.
필요한 것
- npmNode.js 설치(npx 명령어용)
어떤 앱을 쓰세요?
위에서 앱을 고르세요. 기억해 두었다가 다음부터는 버튼에 “…에 설치”라고 표시해요.
Claude Desktop → Settings → Developer → Edit Config를 열고 claude_desktop_config.json에 이 내용을 붙여 넣으세요
{
"mcpServers": {
"mainframe": {
"command": "npx",
"args": [
"-y",
"@notharshhaa/mainframe-mcp-server"
],
"env": {
"ZOSMF_HOST": "your-value",
"ZOSMF_PORT": "your-value",
"ZOSMF_BASE_PATH": "your-value",
"ZOSMF_USER": "your-value",
"ZOSMF_PASSWORD": "your-value",
"ZOSMF_TOKEN": "your-value",
"ZOSMF_TOKEN_TYPE": "your-value",
"ZOSMF_REJECT_UNAUTHORIZED": "your-value",
"ZOSMF_CERT": "your-value",
"ZOSMF_CERT_KEY": "your-value",
"ZOSMF_TOKEN_FILE": "your-value",
"ZOSMF_USER_ID": "your-value",
"ZOSMF_PASSTICKET_APP": "your-value",
"ZOWE_TEAM_CONFIG": "your-value",
"ZOSMF_PROFILE": "your-value",
"LOG_LEVEL": "your-value",
"MCP_TRANSPORT": "your-value",
"MCP_SSE_PORT": "your-value",
"MAX_JOB_OUTPUT_LINES": "your-value",
"MAX_DATASET_READ_LINES": "your-value",
"MAX_JES_SPOOL_FILES": "your-value",
"MAX_AUDIT_LINES": "your-value",
"CMCI_CONTEXT": "your-value",
"CMCI_HOST": "your-value",
"CMCI_PORT": "your-value",
"CMCI_BASE_PATH": "your-value",
"DB2_LOCATION": "your-value",
"DB2_HOST": "your-value",
"DB2_PORT": "your-value",
"DB2_BASE_PATH": "your-value",
"SMF_SUMMARY_DATASET": "your-value",
"RMF_METRICS_ENABLED": "your-value",
"RACF_AUDIT_USS_PATH": "your-value",
"RACF_AUDIT_DATASET": "your-value",
"SECURITY_READ_ONLY": "your-value",
"SECURITY_ALLOWED_TOOLS": "your-value",
"SECURITY_BLOCKED_TOOLS": "your-value",
"SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
"SECURITY_ALLOWED_USS_PATHS": "your-value",
"SECURITY_AUDIT_LOGGING": "your-value",
"SECURITY_MAX_JCL_BYTES": "your-value",
"SECURITY_WRITE_APPROVAL": "your-value",
"SECURITY_JCL_SCAN": "your-value",
"SECURITY_JCL_SCAN_STRICT": "your-value",
"SECURITY_BLOCKED_PROGRAMS": "your-value",
"SECURITY_BLOCKED_JOB_CLASSES": "your-value",
"SECURITY_CHANGE_TICKET_PATTERN": "your-value",
"SECURITY_WRITE_WINDOW": "your-value",
"SECURITY_WRITE_DAYS": "your-value",
"SECURITY_WRITE_WINDOW_TZ": "your-value"
}
}
}
}터미널에서 이 명령어를 실행하세요
claude mcp add mainframe --env ZOSMF_HOST=your-value --env ZOSMF_PORT=your-value --env ZOSMF_BASE_PATH=your-value --env ZOSMF_USER=your-value --env ZOSMF_PASSWORD=your-value --env ZOSMF_TOKEN=your-value --env ZOSMF_TOKEN_TYPE=your-value --env ZOSMF_REJECT_UNAUTHORIZED=your-value --env ZOSMF_CERT=your-value --env ZOSMF_CERT_KEY=your-value --env ZOSMF_TOKEN_FILE=your-value --env ZOSMF_USER_ID=your-value --env ZOSMF_PASSTICKET_APP=your-value --env ZOWE_TEAM_CONFIG=your-value --env ZOSMF_PROFILE=your-value --env LOG_LEVEL=your-value --env MCP_TRANSPORT=your-value --env MCP_SSE_PORT=your-value --env MAX_JOB_OUTPUT_LINES=your-value --env MAX_DATASET_READ_LINES=your-value --env MAX_JES_SPOOL_FILES=your-value --env MAX_AUDIT_LINES=your-value --env CMCI_CONTEXT=your-value --env CMCI_HOST=your-value --env CMCI_PORT=your-value --env CMCI_BASE_PATH=your-value --env DB2_LOCATION=your-value --env DB2_HOST=your-value --env DB2_PORT=your-value --env DB2_BASE_PATH=your-value --env SMF_SUMMARY_DATASET=your-value --env RMF_METRICS_ENABLED=your-value --env RACF_AUDIT_USS_PATH=your-value --env RACF_AUDIT_DATASET=your-value --env SECURITY_READ_ONLY=your-value --env SECURITY_ALLOWED_TOOLS=your-value --env SECURITY_BLOCKED_TOOLS=your-value --env SECURITY_ALLOWED_DATASET_PATTERNS=your-value --env SECURITY_ALLOWED_USS_PATHS=your-value --env SECURITY_AUDIT_LOGGING=your-value --env SECURITY_MAX_JCL_BYTES=your-value --env SECURITY_WRITE_APPROVAL=your-value --env SECURITY_JCL_SCAN=your-value --env SECURITY_JCL_SCAN_STRICT=your-value --env SECURITY_BLOCKED_PROGRAMS=your-value --env SECURITY_BLOCKED_JOB_CLASSES=your-value --env SECURITY_CHANGE_TICKET_PATTERN=your-value --env SECURITY_WRITE_WINDOW=your-value --env SECURITY_WRITE_DAYS=your-value --env SECURITY_WRITE_WINDOW_TZ=your-value -- npx -y @notharshhaa/mainframe-mcp-server실행하기 전에 빈 값을 채워 주세요.
또는 설정을 직접 복사하기
프로젝트의 .cursor/mcp.json 또는 ~/.cursor/mcp.json에 붙여 넣으세요
{
"mcpServers": {
"mainframe": {
"command": "npx",
"args": [
"-y",
"@notharshhaa/mainframe-mcp-server"
],
"env": {
"ZOSMF_HOST": "your-value",
"ZOSMF_PORT": "your-value",
"ZOSMF_BASE_PATH": "your-value",
"ZOSMF_USER": "your-value",
"ZOSMF_PASSWORD": "your-value",
"ZOSMF_TOKEN": "your-value",
"ZOSMF_TOKEN_TYPE": "your-value",
"ZOSMF_REJECT_UNAUTHORIZED": "your-value",
"ZOSMF_CERT": "your-value",
"ZOSMF_CERT_KEY": "your-value",
"ZOSMF_TOKEN_FILE": "your-value",
"ZOSMF_USER_ID": "your-value",
"ZOSMF_PASSTICKET_APP": "your-value",
"ZOWE_TEAM_CONFIG": "your-value",
"ZOSMF_PROFILE": "your-value",
"LOG_LEVEL": "your-value",
"MCP_TRANSPORT": "your-value",
"MCP_SSE_PORT": "your-value",
"MAX_JOB_OUTPUT_LINES": "your-value",
"MAX_DATASET_READ_LINES": "your-value",
"MAX_JES_SPOOL_FILES": "your-value",
"MAX_AUDIT_LINES": "your-value",
"CMCI_CONTEXT": "your-value",
"CMCI_HOST": "your-value",
"CMCI_PORT": "your-value",
"CMCI_BASE_PATH": "your-value",
"DB2_LOCATION": "your-value",
"DB2_HOST": "your-value",
"DB2_PORT": "your-value",
"DB2_BASE_PATH": "your-value",
"SMF_SUMMARY_DATASET": "your-value",
"RMF_METRICS_ENABLED": "your-value",
"RACF_AUDIT_USS_PATH": "your-value",
"RACF_AUDIT_DATASET": "your-value",
"SECURITY_READ_ONLY": "your-value",
"SECURITY_ALLOWED_TOOLS": "your-value",
"SECURITY_BLOCKED_TOOLS": "your-value",
"SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
"SECURITY_ALLOWED_USS_PATHS": "your-value",
"SECURITY_AUDIT_LOGGING": "your-value",
"SECURITY_MAX_JCL_BYTES": "your-value",
"SECURITY_WRITE_APPROVAL": "your-value",
"SECURITY_JCL_SCAN": "your-value",
"SECURITY_JCL_SCAN_STRICT": "your-value",
"SECURITY_BLOCKED_PROGRAMS": "your-value",
"SECURITY_BLOCKED_JOB_CLASSES": "your-value",
"SECURITY_CHANGE_TICKET_PATTERN": "your-value",
"SECURITY_WRITE_WINDOW": "your-value",
"SECURITY_WRITE_DAYS": "your-value",
"SECURITY_WRITE_WINDOW_TZ": "your-value"
}
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
또는 설정을 직접 복사하기
프로젝트의 .vscode/mcp.json에 붙여 넣으세요
{
"servers": {
"mainframe": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@notharshhaa/mainframe-mcp-server"
],
"env": {
"ZOSMF_HOST": "your-value",
"ZOSMF_PORT": "your-value",
"ZOSMF_BASE_PATH": "your-value",
"ZOSMF_USER": "your-value",
"ZOSMF_PASSWORD": "your-value",
"ZOSMF_TOKEN": "your-value",
"ZOSMF_TOKEN_TYPE": "your-value",
"ZOSMF_REJECT_UNAUTHORIZED": "your-value",
"ZOSMF_CERT": "your-value",
"ZOSMF_CERT_KEY": "your-value",
"ZOSMF_TOKEN_FILE": "your-value",
"ZOSMF_USER_ID": "your-value",
"ZOSMF_PASSTICKET_APP": "your-value",
"ZOWE_TEAM_CONFIG": "your-value",
"ZOSMF_PROFILE": "your-value",
"LOG_LEVEL": "your-value",
"MCP_TRANSPORT": "your-value",
"MCP_SSE_PORT": "your-value",
"MAX_JOB_OUTPUT_LINES": "your-value",
"MAX_DATASET_READ_LINES": "your-value",
"MAX_JES_SPOOL_FILES": "your-value",
"MAX_AUDIT_LINES": "your-value",
"CMCI_CONTEXT": "your-value",
"CMCI_HOST": "your-value",
"CMCI_PORT": "your-value",
"CMCI_BASE_PATH": "your-value",
"DB2_LOCATION": "your-value",
"DB2_HOST": "your-value",
"DB2_PORT": "your-value",
"DB2_BASE_PATH": "your-value",
"SMF_SUMMARY_DATASET": "your-value",
"RMF_METRICS_ENABLED": "your-value",
"RACF_AUDIT_USS_PATH": "your-value",
"RACF_AUDIT_DATASET": "your-value",
"SECURITY_READ_ONLY": "your-value",
"SECURITY_ALLOWED_TOOLS": "your-value",
"SECURITY_BLOCKED_TOOLS": "your-value",
"SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
"SECURITY_ALLOWED_USS_PATHS": "your-value",
"SECURITY_AUDIT_LOGGING": "your-value",
"SECURITY_MAX_JCL_BYTES": "your-value",
"SECURITY_WRITE_APPROVAL": "your-value",
"SECURITY_JCL_SCAN": "your-value",
"SECURITY_JCL_SCAN_STRICT": "your-value",
"SECURITY_BLOCKED_PROGRAMS": "your-value",
"SECURITY_BLOCKED_JOB_CLASSES": "your-value",
"SECURITY_CHANGE_TICKET_PATTERN": "your-value",
"SECURITY_WRITE_WINDOW": "your-value",
"SECURITY_WRITE_DAYS": "your-value",
"SECURITY_WRITE_WINDOW_TZ": "your-value"
}
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
이 서버는 내 컴퓨터에서 실행되는데, ChatGPT는 인터넷에 있는 서버에만 연결할 수 있어요. 다른 앱을 고르세요.
선택한 앱은 이 기기의 쿠키에만 저장돼요. 계정은 필요 없어요.
직접 입력할 값
- z/OSMF hostname or IP address
ZOSMF_PORTenvz/OSMF HTTPS port (default 443)ZOSMF_BASE_PATHenvOptional API gateway or mediation layer prefix for z/OSMFZOSMF_USERenvz/OS user id (required with ZOSMF_PASSWORD unless ZOSMF_TOKEN is set)- Password for basic auth (required with ZOSMF_USER unless ZOSMF_TOKEN is set)
- Auth token (alternative to user/password)
ZOSMF_TOKEN_TYPEenvToken type when using ZOSMF_TOKEN (e.g. LTPA2)ZOSMF_REJECT_UNAUTHORIZEDenvVerify TLS certificates (true in production)ZOSMF_CERTenvPEM client certificate file path for mTLS authZOSMF_CERT_KEYenvPEM client key file path for mTLS auth (required with ZOSMF_CERT)ZOSMF_TOKEN_FILEenvRead ZOSMF_TOKEN from this file at startup (vault/agent injection)ZOSMF_USER_IDenvEnd-user id for PassTicket identity propagation (RACF sees this user, not the service account)ZOSMF_PASSTICKET_APPenvRACF PTKTDATA application name for PassTicket generation (default ZOSMF)ZOWE_TEAM_CONFIGenvPath to a zowe.config.json to import connection settings from (env vars win)ZOSMF_PROFILEenvProfile name inside the Zowe team config (defaults to defaults.zosmf)LOG_LEVELenvLog level: fatal, error, warn, info, debug, trace, silentMCP_TRANSPORTenvTransport: stdio (IDE) or sse (legacy HTTP+SSE for container/network deployments)MCP_SSE_PORTenvListen port when MCP_TRANSPORT=sseMAX_JOB_OUTPUT_LINESenvMax lines returned from a single spool DDMAX_DATASET_READ_LINESenvMax lines returned from dataset or USS readsMAX_JES_SPOOL_FILESenvMax spool files fetched during diagnosticsMAX_AUDIT_LINESenvMax RACF audit log lines per queryCMCI_CONTEXTenvCICSplex name or region APPLID (required for CICS tools)CMCI_HOSTenvCMCI hostname (defaults to ZOSMF_HOST)CMCI_PORTenvCMCI HTTPS port (default 1490)CMCI_BASE_PATHenvCMCI REST base pathDB2_LOCATIONenvDb2 subsystem location name (required for Db2 tools)DB2_HOSTenvDb2 REST hostname (defaults to ZOSMF_HOST)DB2_PORTenvDb2 REST port (default 50400)DB2_BASE_PATHenvDb2 REST base pathSMF_SUMMARY_DATASETenvOptional SMF summary dataset for offline metricsRMF_METRICS_ENABLEDenvQuery z/OSMF RMF metrics when availableRACF_AUDIT_USS_PATHenvUSS path to RACF audit log fileRACF_AUDIT_DATASETenvSequential dataset containing RACF audit recordsSECURITY_READ_ONLYenvWhen true (default), blocks write tools such as submit_jclSECURITY_ALLOWED_TOOLSenvComma-separated allowlist of MCP tool namesSECURITY_BLOCKED_TOOLSenvComma-separated blocklist of MCP tool namesSECURITY_ALLOWED_DATASET_PATTERNSenvComma-separated dataset patterns (e.g. USERDEV.*,SYS1.*)SECURITY_ALLOWED_USS_PATHSenvComma-separated USS path prefixesSECURITY_AUDIT_LOGGINGenvLog every tool invocation to stderr (SIEM-friendly JSON)SECURITY_MAX_JCL_BYTESenvMaximum inline JCL size for submit_jclSECURITY_WRITE_APPROVALenvHuman-in-the-loop: submit_jcl returns a one-time token and approve_write executes (default false)SECURITY_JCL_SCANenvPre-flight scan JCL before submission: IDCAMS DELETE, IEFBR14 DISP DELETE, blocked utilities (default true)SECURITY_JCL_SCAN_STRICTenvStrict scan mode: WARN findings also block submissions (default false)SECURITY_BLOCKED_PROGRAMSenvComma-separated EXEC programs that may never run (extends ADRDSSU,ICKDSF,IEHINITT)SECURITY_BLOCKED_JOB_CLASSESenvComma-separated JES job classes that may never be usedSECURITY_CHANGE_TICKET_PATTERNenvRegex a changeTicket argument must match on writes, e.g. CHG[0-9]{6}SECURITY_WRITE_WINDOWenvAllowed write window, 24h HH:MM-HH:MM (overnight ranges allowed), e.g. 08:00-18:00SECURITY_WRITE_DAYSenvWeekdays writes are allowed: 0=Sun..6=Sat, e.g. 1-5SECURITY_WRITE_WINDOW_TZenvIANA timezone for the write window (default UTC)
이 설정은 제작자의 레지스트리 정보로 만들었어요. README와 다르면 README를 따르세요.
할 수 있는 일
내 컴퓨터에서 실행돼요. 설치하면 AI 앱에 도구 목록이 나타나요.
기본 점검i
누구나 볼 수 있는 정보를 점검했고, 코드는 읽지 않았어요. 해당하지 않는 항목은 개수에서 뺐어요. · 2026년 11월 9일 점검
- ✓ 통과
제작자와 저장소 일치
레지스트리 이름이 GitHub 계정 NotHarshhaa 기준으로 확인되었고, 이 계정이 저장소를 소유하고 있어요
- … 아직 점검 안 함
계속 관리되고 있음
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
- … 아직 점검 안 함
라이선스 있음
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
- – 해당 없음
엔드포인트 응답
내 컴퓨터에서 실행되는 서버라 인터넷 엔드포인트가 없어요
- – 해당 없음
OAuth로 로그인
내 컴퓨터에서 실행되며, 대신 로컬 설정을 사용해요
- … 아직 점검 안 함
도구 설명에 숨겨진 지시 없음
내 컴퓨터에서 실행돼요. 도구 목록은 인터넷 엔드포인트가 있는 서버에서만 읽을 수 있어요
데이터베이스 및 데이터셋 카테고리의 다른 서버와 비교i
- 이 카테고리의 다른 서버 1152개 중 0%보다 스타가 많아요
- 이 카테고리의 다른 서버 1152개 중 72%보다 최근에 레지스트리에 공개됐어요
- 기본 점검 결과가 이 카테고리의 다른 서버 1152개 중 100%와 같거나 더 좋아요
레지스트리에서 이 카테고리의 활성 서버 전체와 비교했어요. 스타는 게시자가 저장소를 소유한 경우에만 세요.
자주 묻는 질문
Mainframe MCP Server, 안전한가요?
해당하는 기본 점검 1개 중 1개를 통과했어요. 코드는 읽지 않았어요. 키나 토큰을 넣기 전에 서버가 어떤 권한을 요구하는지 확인하고, 꼭 필요한 권한만 있는 키를 쓰세요.
어떤 키나 코드가 필요한가요?
입력해야 할 값: ZOSMF_HOST, ZOSMF_PASSWORD, ZOSMF_TOKEN
내 컴퓨터에서 실행되나요, 클라우드에서 실행되나요?
내 컴퓨터에서 실행돼요. AI 앱이 필요할 때 실행하고, 데이터는 제작자의 서버를 거치지 않아요(서버 자체가 온라인 서비스를 호출하는 경우는 제외).
아직 관리되고 있나요?
GitHub 저장소는 마지막으로 – 변경됐고, 최신 버전(3.0.0)은 15일 전 레지스트리에 올라왔어요.
어떤 앱에서 쓸 수 있나요?
Claude Desktop, Claude Code, Cursor, VS Code처럼 MCP를 지원하는 앱에서 쓸 수 있어요. 내 컴퓨터에 Node.js도 있어야 해요.
대신 쓸 수 있는 건 뭐가 있나요?
같은 카테고리에는: Supabase, MongoDB MCP Server, Elasticsearch MCP Server
대안
같은 카테고리에서 다른 제작자가 만든 서버예요. 스타 순으로 정렬했어요.
카드 보는 법:↓ 주간 다운로드i★ GitHub 스타i세 기둥: 리뷰 · 점검 · 사용 정도i업데이트 = 최신 버전을 레지스트리에 공개한 날i
제작자의 README
README 열기
제작자의 저장소에서 쓰인 그대로 가져왔어요. PopNx MCP가 검토하거나 보증한 내용이 아니에요. HTML, 이미지, 스크립트는 제거했어요. 링크를 누르면 이 사이트를 벗어나요.
mainframe-mcp-server
MCP Server for IBM z/OS using Zowe APIs
An enterprise-grade Model Context Protocol (MCP) server for IBM z/OS environments.
Bridges MCP-compatible AI agents with mainframe resources — jobs, datasets, USS, and operational diagnostics — using the Zowe SDK (Open Mainframe Project) as the connectivity layer.
Contents
- What it does
- How it's different
- z/OS prerequisites
- Tools
- Prompts & resources (MCP-native surface)
- Enterprise security
- Enterprise features
- Per-user identity & SSO
- Governed writes
- Trust model & prompt injection
- How the intelligence tools work
- Incident management & runbooks
- Quick start
- Transports
- Limits & timeouts
- Troubleshooting & FAQ
- Examples
- Project & community
- License
- Trademarks
What it does
mainframe-mcp-server exposes z/OS capabilities as Model Context Protocol tools. An AI agent can list jobs, read datasets, inspect USS paths, submit JCL, and run operational diagnostics — without you writing Zowe CLI commands by hand.
Connectivity is handled by the Zowe SDK (Open Mainframe Project) over z/OSMF REST. This project adds the MCP tool layer, input validation, safety limits, and AI-friendly response formatting on top.
How it's different
| mainframe-mcp-server | Zowe CLI + scripts | Host IDE tooling (IDz, Z Open Editor) | Other z/OS MCP bridges | |
|---|---|---|---|---|
| Interface | MCP tools for AI agents | Terminal commands, shell scripts | Eclipse/VS Code GUIs | MCP tools for AI agents |
| Output | Structured sections & tables tuned for LLM reasoning | Raw terminal text you must parse yourself | IDE views | Varies by project |
| Guardrails | Read-only by default, tool allow/block lists, dataset & USS boundaries, audit logging, JCL size cap | None built in — you script them | Client-side only | Varies by project |
| Failure knowledge | Curated abend-code reference, failing-step heuristics, risk scoring | Manual message lookup | Interactive debugging | Rare |
| Install | npx — no server-side footprint beyond z/OSMF access | Node + Zowe CLI + your scripts | Full IDE estate | Often heavier runtimes |
| Coverage | Jobs, datasets, USS, CICS, Db2, SMF/RMF, RACF audit (30+ tools) | Full Zowe command set | Edit, debug, compile | Varies |
Honest positioning: the z/OS MCP ecosystem is early. IBM and community authors publish their own MCP bridges — evaluate them against your requirements. This project's differentiators are zero-dependency npm install, guardrails enforced at the server layer, and output shaped for LLM consumption rather than human eyes. It is not a replacement for Zowe CLI or IBM Z Open Editor — it is an MCP bridge over the same z/OSMF APIs.
z/OS prerequisites
The server is a pure client — nothing is installed on z/OS. It requires REST services that are enabled in standard z/OSMF estates.
z/OSMF (required — all core tools)
| z/OSMF REST service | Used by | Notes |
|---|---|---|
Jobs REST (/zosmf/restjobs/jobs) | list_jobs, get_job_status, get_job_output, get_job_jcl, submit_jcl, all operations & intelligence tools | List, query, spool content, JES submit |
Files REST — datasets (/zosmf/restfiles/ds) | list_datasets, search_dataset, read_dataset, search_members, get_dataset_info | Catalog list, members, content read |
Files REST — USS (/zosmf/restfiles/fs) | list_uss_directory, read_uss_file, search_uss_files, RACF audit source | Directory list, file read |
z/OSMF info (/info) | verify_zosmf_connection | Optional; version read-out only |
RMF REST (/rmf/mvs/GPO/) | get_smf_metrics | Optional; disabled with RMF_METRICS_ENABLED=false |
Baseline: z/OS 2.4 LTS or later with APAR-current z/OSMF — the target the Zowe SDK (v8) is built against. Core job/dataset/USS tools are expected to work on z/OSMF levels from z/OS 2.3 onward; if you run an older or unusual level, open an issue with your results so the matrix can be updated.
CICS via CMCI (optional — list_cics_regions, get_cics_region_status, list_cics_transactions)
- CICS TS 5.4 or later with CMCI active (a CICSPlex SM WUI region, or a single-region CMCI setup).
- Set
CMCI_CONTEXT(CICSplex name or region APPLID); optionallyCMCI_HOST,CMCI_PORT(default1490),CMCI_BASE_PATH(default/CICSSystemManagement). - The service account needs RACF/SAF authority to the CMCI data sets (
XCSDATA/CICSPLEXresource classes as configured at your site).
Db2 REST (optional — list_db2_subsystems, search_db2_catalog)
- Db2 12 for z/OS or later with the Db2 REST services capability exposed at
DB2_HOST:DB2_PORT(default50400, base path/dbrest) — direct DDF-served REST or fronted by your API mediation layer. - Set
DB2_LOCATION(the subsystem location name). Tools run read-only catalog SQL againstSYSIBM.SYSTABLESwith literal-escaped, size-capped input.
RACF audit source (optional — query_racf_audit)
- An existing audit extract the service account can read: a USS log file (
RACF_AUDIT_USS_PATH) or a sequential dataset (RACF_AUDIT_DATASET), e.g. ADUINFOS/IRRADU00 output written to file. The server parses the text; it does not run IRRADU00 for you.
Service account
Use a dedicated z/OS user with least-privilege RACF profiles (job list/read authority, submit authority only if SECURITY_READ_ONLY=false).
Tools
Type legend: READ — reads z/OS state, never modifies anything · WRITE — submits work to JES · OFFLINE — no mainframe I/O at all.
Jobs
| Tool | Type | Description |
|---|---|---|
list_jobs | READ | List jobs by owner, prefix, or status |
get_job_status | READ | Status and return code for a job |
get_job_output | READ | Spool inventory or DD content |
submit_jcl | WRITE | Submit inline JCL — governed by pre-flight scan, change ticket, change window, and optional human approval |
approve_write | WRITE | Execute a pending JCL submission after human review (requires SECURITY_WRITE_APPROVAL=true) |
analyze_job_failure | READ | Abend code, failing step, and suggested fix |
get_job_jcl | READ | Retrieve submitted JCL from job spool |
Datasets
| Tool | Type | Description |
|---|---|---|
list_datasets | READ | List datasets matching an HLQ pattern |
read_dataset | READ | Read a sequential dataset or PDS member |
search_dataset | READ | Search datasets by pattern |
search_members | READ | Search or list PDS members |
get_dataset_info | READ | Catalog attributes without reading content |
USS
| Tool | Type | Description |
|---|---|---|
list_uss_directory | READ | List a USS directory |
read_uss_file | READ | Read a USS file |
search_uss_files | READ | Search files under a USS path |
Operations
| Tool | Type | Description |
|---|---|---|
find_failed_jobs | READ | Failed jobs in a time window |
summarize_abends | READ | Abend code breakdown across recent jobs |
system_health_summary | READ | Active, queued, and failed job snapshot |
investigate_incident | READ | Full incident bundle for a job |
lookup_abend_code | OFFLINE | Abend reference lookup (S0C7, S806, S222, S0C4, …) |
verify_zosmf_connection | READ | Test z/OSMF connectivity and auth |
compare_jobs | READ | Side-by-side comparison of two jobs |
get_user_jobs_summary | READ | Job counts by status for an owner |
CICS
Requires optional CMCI configuration — see z/OS prerequisites.
| Tool | Type | Description |
|---|---|---|
list_cics_regions | READ | List CICS regions via CMCI REST |
get_cics_region_status | READ | Status and attributes of a CICS region |
list_cics_transactions | READ | Transaction definitions in a region |
get_cics_region_stats | READ | Region statistics/attributes from the CMCI CICSRegion resource |
cics_newcopy | WRITE | NEWCOPY a program via CMCI action (CICS TS 5.6+) |
cics_disable_transaction | WRITE | Disable/enable a local transaction via CMCI SET action |
Db2
Requires optional Db2 REST configuration — see z/OS prerequisites.
| Tool | Type | Description |
|---|---|---|
list_db2_subsystems | READ | List Db2 locations via Db2 REST |
search_db2_catalog | READ | Read-only catalog search (tables, views, aliases) |
Console & JES
Operator commands run through an extended MCS console (ZOSMF_CONSOLE_NAME); command tools are gated writes subject to read-only mode, policy roles, change tickets, and change windows.
| Tool | Type | Description |
|---|---|---|
issue_console_command | WRITE | MVS commands (D A,L, D GRS,RES=…) with follow-up message collection |
get_console_messages | READ | Operations-log tail (SYSLOG-style console feed) |
hold_job / release_job | WRITE | JES2 $HJ / $OJ job hold and release |
cancel_job | WRITE | Cancel a job via the z/OSMF jobs API |
get_wlm_status | WRITE | D WLM display (service policy / resources) |
ims_command | WRITE | IMS commands via the system console (/DIS ACTIVE, /DIS TRAN …) |
get_hsm_activity | READ | DFSMShsm recall/migration activity from the operations log |
analyze_logrec | WRITE | Submit an EREP report against LOGREC and summarize error records |
Schedulers
| Tool | Type | Description |
|---|---|---|
scheduler_job_status | READ | Control-M / CA 7 / IBM WLS job status via their REST APIs (SCHEDULER_ADAPTERS) |
| job_dependencies | READ | JCL dataset-flow analysis — inputs, outp
앞부분만 보여 드려요. 나머지는 저장소에서 읽어 보세요