Mainframe MCP Server

Name: Mainframe MCP Server
Author: NotHarshhaa

de NotHarshhaaversión 3.0.0i★ –iSe ejecuta en tu computadora

Nombre en el registroio.github.NotHarshhaa/mainframe-mcp-server

Instalar

Resumen

Descripción del creador (original en inglés)

MCP server for IBM z/OS jobs, datasets, USS, and operational diagnostics via Zowe SDK.

Los tres pilares de PopNx MCP

Estos tres nunca se combinan en una sola puntuación: las opiniones, las mediciones y la popularidad son cosas distintas.

Opinión de usuariosiAún no hay reseñasLas reseñas se abrirán junto con las cuentas en una etapa posterior
Nuestras revisiones básicasi1 de 1 superadasRevisado con información pública; el código aún no se ha escaneado
UsoiAún sin medir★ –

Qué puedes hacer con él

Todavía no escribimos un resumen sencillo para este. Abajo están los datos que leímos del registro.

Conexión: Se ejecuta en tu computadora
Transporte: stdio
Categoría: Otros
Debes completar: ZOSMF_HOST, ZOSMF_PASSWORD, ZOSMF_TOKEN

Instalación

Elige la app de IA que usas y copia la configuración.

Antes de instalar

Revisiones básicas: 1 de 1 superadas
Se ejecuta en tu computadora con los permisos de tu usuario (archivos, red, apps).
Debes completar tú: ZOSMF_HOST, ZOSMF_PORT, ZOSMF_BASE_PATH, ZOSMF_USER, ZOSMF_PASSWORD, ZOSMF_TOKEN, ZOSMF_TOKEN_TYPE, ZOSMF_REJECT_UNAUTHORIZED, ZOSMF_CERT, ZOSMF_CERT_KEY, ZOSMF_TOKEN_FILE, ZOSMF_USER_ID, ZOSMF_PASSTICKET_APP, ZOWE_TEAM_CONFIG, ZOSMF_PROFILE, LOG_LEVEL, MCP_TRANSPORT, MCP_SSE_PORT, MAX_JOB_OUTPUT_LINES, MAX_DATASET_READ_LINES, MAX_JES_SPOOL_FILES, MAX_AUDIT_LINES, CMCI_CONTEXT, CMCI_HOST, CMCI_PORT, CMCI_BASE_PATH, DB2_LOCATION, DB2_HOST, DB2_PORT, DB2_BASE_PATH, SMF_SUMMARY_DATASET, RMF_METRICS_ENABLED, RACF_AUDIT_USS_PATH, RACF_AUDIT_DATASET, SECURITY_READ_ONLY, SECURITY_ALLOWED_TOOLS, SECURITY_BLOCKED_TOOLS, SECURITY_ALLOWED_DATASET_PATTERNS, SECURITY_ALLOWED_USS_PATHS, SECURITY_AUDIT_LOGGING, SECURITY_MAX_JCL_BYTES, SECURITY_WRITE_APPROVAL, SECURITY_JCL_SCAN, SECURITY_JCL_SCAN_STRICT, SECURITY_BLOCKED_PROGRAMS, SECURITY_BLOCKED_JOB_CLASSES, SECURITY_CHANGE_TICKET_PATTERN, SECURITY_WRITE_WINDOW, SECURITY_WRITE_DAYS, SECURITY_WRITE_WINDOW_TZ

Los valores marcados como secretos son llaves de tu cuenta. Nunca los compartas ni los pegues en un chat.

Necesitas

npmNode.js instalado (para el comando npx)

¿Qué app usas?

ClaudeClaude CodeCursorVS CodeChatGPT

Elige tu app arriba. La recordamos, así que la próxima vez el botón dirá “Instalar en …”.

Abre Claude Desktop → Settings → Developer → Edit Config y pega esto en claude_desktop_config.json

{
  "mcpServers": {
    "mainframe": {
      "command": "npx",
      "args": [
        "-y",
        "@notharshhaa/mainframe-mcp-server"
      ],
      "env": {
        "ZOSMF_HOST": "your-value",
        "ZOSMF_PORT": "your-value",
        "ZOSMF_BASE_PATH": "your-value",
        "ZOSMF_USER": "your-value",
        "ZOSMF_PASSWORD": "your-value",
        "ZOSMF_TOKEN": "your-value",
        "ZOSMF_TOKEN_TYPE": "your-value",
        "ZOSMF_REJECT_UNAUTHORIZED": "your-value",
        "ZOSMF_CERT": "your-value",
        "ZOSMF_CERT_KEY": "your-value",
        "ZOSMF_TOKEN_FILE": "your-value",
        "ZOSMF_USER_ID": "your-value",
        "ZOSMF_PASSTICKET_APP": "your-value",
        "ZOWE_TEAM_CONFIG": "your-value",
        "ZOSMF_PROFILE": "your-value",
        "LOG_LEVEL": "your-value",
        "MCP_TRANSPORT": "your-value",
        "MCP_SSE_PORT": "your-value",
        "MAX_JOB_OUTPUT_LINES": "your-value",
        "MAX_DATASET_READ_LINES": "your-value",
        "MAX_JES_SPOOL_FILES": "your-value",
        "MAX_AUDIT_LINES": "your-value",
        "CMCI_CONTEXT": "your-value",
        "CMCI_HOST": "your-value",
        "CMCI_PORT": "your-value",
        "CMCI_BASE_PATH": "your-value",
        "DB2_LOCATION": "your-value",
        "DB2_HOST": "your-value",
        "DB2_PORT": "your-value",
        "DB2_BASE_PATH": "your-value",
        "SMF_SUMMARY_DATASET": "your-value",
        "RMF_METRICS_ENABLED": "your-value",
        "RACF_AUDIT_USS_PATH": "your-value",
        "RACF_AUDIT_DATASET": "your-value",
        "SECURITY_READ_ONLY": "your-value",
        "SECURITY_ALLOWED_TOOLS": "your-value",
        "SECURITY_BLOCKED_TOOLS": "your-value",
        "SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
        "SECURITY_ALLOWED_USS_PATHS": "your-value",
        "SECURITY_AUDIT_LOGGING": "your-value",
        "SECURITY_MAX_JCL_BYTES": "your-value",
        "SECURITY_WRITE_APPROVAL": "your-value",
        "SECURITY_JCL_SCAN": "your-value",
        "SECURITY_JCL_SCAN_STRICT": "your-value",
        "SECURITY_BLOCKED_PROGRAMS": "your-value",
        "SECURITY_BLOCKED_JOB_CLASSES": "your-value",
        "SECURITY_CHANGE_TICKET_PATTERN": "your-value",
        "SECURITY_WRITE_WINDOW": "your-value",
        "SECURITY_WRITE_DAYS": "your-value",
        "SECURITY_WRITE_WINDOW_TZ": "your-value"
      }
    }
  }
}

Ejecuta esto en tu terminal

claude mcp add mainframe --env ZOSMF_HOST=your-value --env ZOSMF_PORT=your-value --env ZOSMF_BASE_PATH=your-value --env ZOSMF_USER=your-value --env ZOSMF_PASSWORD=your-value --env ZOSMF_TOKEN=your-value --env ZOSMF_TOKEN_TYPE=your-value --env ZOSMF_REJECT_UNAUTHORIZED=your-value --env ZOSMF_CERT=your-value --env ZOSMF_CERT_KEY=your-value --env ZOSMF_TOKEN_FILE=your-value --env ZOSMF_USER_ID=your-value --env ZOSMF_PASSTICKET_APP=your-value --env ZOWE_TEAM_CONFIG=your-value --env ZOSMF_PROFILE=your-value --env LOG_LEVEL=your-value --env MCP_TRANSPORT=your-value --env MCP_SSE_PORT=your-value --env MAX_JOB_OUTPUT_LINES=your-value --env MAX_DATASET_READ_LINES=your-value --env MAX_JES_SPOOL_FILES=your-value --env MAX_AUDIT_LINES=your-value --env CMCI_CONTEXT=your-value --env CMCI_HOST=your-value --env CMCI_PORT=your-value --env CMCI_BASE_PATH=your-value --env DB2_LOCATION=your-value --env DB2_HOST=your-value --env DB2_PORT=your-value --env DB2_BASE_PATH=your-value --env SMF_SUMMARY_DATASET=your-value --env RMF_METRICS_ENABLED=your-value --env RACF_AUDIT_USS_PATH=your-value --env RACF_AUDIT_DATASET=your-value --env SECURITY_READ_ONLY=your-value --env SECURITY_ALLOWED_TOOLS=your-value --env SECURITY_BLOCKED_TOOLS=your-value --env SECURITY_ALLOWED_DATASET_PATTERNS=your-value --env SECURITY_ALLOWED_USS_PATHS=your-value --env SECURITY_AUDIT_LOGGING=your-value --env SECURITY_MAX_JCL_BYTES=your-value --env SECURITY_WRITE_APPROVAL=your-value --env SECURITY_JCL_SCAN=your-value --env SECURITY_JCL_SCAN_STRICT=your-value --env SECURITY_BLOCKED_PROGRAMS=your-value --env SECURITY_BLOCKED_JOB_CLASSES=your-value --env SECURITY_CHANGE_TICKET_PATTERN=your-value --env SECURITY_WRITE_WINDOW=your-value --env SECURITY_WRITE_DAYS=your-value --env SECURITY_WRITE_WINDOW_TZ=your-value -- npx -y @notharshhaa/mainframe-mcp-server

Completa los valores vacíos antes de ejecutarlo.

Abrir en Cursor

O copia la configuración tú

Pégalo en .cursor/mcp.json de tu proyecto, o en ~/.cursor/mcp.json

{
  "mcpServers": {
    "mainframe": {
      "command": "npx",
      "args": [
        "-y",
        "@notharshhaa/mainframe-mcp-server"
      ],
      "env": {
        "ZOSMF_HOST": "your-value",
        "ZOSMF_PORT": "your-value",
        "ZOSMF_BASE_PATH": "your-value",
        "ZOSMF_USER": "your-value",
        "ZOSMF_PASSWORD": "your-value",
        "ZOSMF_TOKEN": "your-value",
        "ZOSMF_TOKEN_TYPE": "your-value",
        "ZOSMF_REJECT_UNAUTHORIZED": "your-value",
        "ZOSMF_CERT": "your-value",
        "ZOSMF_CERT_KEY": "your-value",
        "ZOSMF_TOKEN_FILE": "your-value",
        "ZOSMF_USER_ID": "your-value",
        "ZOSMF_PASSTICKET_APP": "your-value",
        "ZOWE_TEAM_CONFIG": "your-value",
        "ZOSMF_PROFILE": "your-value",
        "LOG_LEVEL": "your-value",
        "MCP_TRANSPORT": "your-value",
        "MCP_SSE_PORT": "your-value",
        "MAX_JOB_OUTPUT_LINES": "your-value",
        "MAX_DATASET_READ_LINES": "your-value",
        "MAX_JES_SPOOL_FILES": "your-value",
        "MAX_AUDIT_LINES": "your-value",
        "CMCI_CONTEXT": "your-value",
        "CMCI_HOST": "your-value",
        "CMCI_PORT": "your-value",
        "CMCI_BASE_PATH": "your-value",
        "DB2_LOCATION": "your-value",
        "DB2_HOST": "your-value",
        "DB2_PORT": "your-value",
        "DB2_BASE_PATH": "your-value",
        "SMF_SUMMARY_DATASET": "your-value",
        "RMF_METRICS_ENABLED": "your-value",
        "RACF_AUDIT_USS_PATH": "your-value",
        "RACF_AUDIT_DATASET": "your-value",
        "SECURITY_READ_ONLY": "your-value",
        "SECURITY_ALLOWED_TOOLS": "your-value",
        "SECURITY_BLOCKED_TOOLS": "your-value",
        "SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
        "SECURITY_ALLOWED_USS_PATHS": "your-value",
        "SECURITY_AUDIT_LOGGING": "your-value",
        "SECURITY_MAX_JCL_BYTES": "your-value",
        "SECURITY_WRITE_APPROVAL": "your-value",
        "SECURITY_JCL_SCAN": "your-value",
        "SECURITY_JCL_SCAN_STRICT": "your-value",
        "SECURITY_BLOCKED_PROGRAMS": "your-value",
        "SECURITY_BLOCKED_JOB_CLASSES": "your-value",
        "SECURITY_CHANGE_TICKET_PATTERN": "your-value",
        "SECURITY_WRITE_WINDOW": "your-value",
        "SECURITY_WRITE_DAYS": "your-value",
        "SECURITY_WRITE_WINDOW_TZ": "your-value"
      }
    }
  }
}

Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.

Abrir en VS Code

O copia la configuración tú

Pégalo en .vscode/mcp.json de tu proyecto

{
  "servers": {
    "mainframe": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@notharshhaa/mainframe-mcp-server"
      ],
      "env": {
        "ZOSMF_HOST": "your-value",
        "ZOSMF_PORT": "your-value",
        "ZOSMF_BASE_PATH": "your-value",
        "ZOSMF_USER": "your-value",
        "ZOSMF_PASSWORD": "your-value",
        "ZOSMF_TOKEN": "your-value",
        "ZOSMF_TOKEN_TYPE": "your-value",
        "ZOSMF_REJECT_UNAUTHORIZED": "your-value",
        "ZOSMF_CERT": "your-value",
        "ZOSMF_CERT_KEY": "your-value",
        "ZOSMF_TOKEN_FILE": "your-value",
        "ZOSMF_USER_ID": "your-value",
        "ZOSMF_PASSTICKET_APP": "your-value",
        "ZOWE_TEAM_CONFIG": "your-value",
        "ZOSMF_PROFILE": "your-value",
        "LOG_LEVEL": "your-value",
        "MCP_TRANSPORT": "your-value",
        "MCP_SSE_PORT": "your-value",
        "MAX_JOB_OUTPUT_LINES": "your-value",
        "MAX_DATASET_READ_LINES": "your-value",
        "MAX_JES_SPOOL_FILES": "your-value",
        "MAX_AUDIT_LINES": "your-value",
        "CMCI_CONTEXT": "your-value",
        "CMCI_HOST": "your-value",
        "CMCI_PORT": "your-value",
        "CMCI_BASE_PATH": "your-value",
        "DB2_LOCATION": "your-value",
        "DB2_HOST": "your-value",
        "DB2_PORT": "your-value",
        "DB2_BASE_PATH": "your-value",
        "SMF_SUMMARY_DATASET": "your-value",
        "RMF_METRICS_ENABLED": "your-value",
        "RACF_AUDIT_USS_PATH": "your-value",
        "RACF_AUDIT_DATASET": "your-value",
        "SECURITY_READ_ONLY": "your-value",
        "SECURITY_ALLOWED_TOOLS": "your-value",
        "SECURITY_BLOCKED_TOOLS": "your-value",
        "SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
        "SECURITY_ALLOWED_USS_PATHS": "your-value",
        "SECURITY_AUDIT_LOGGING": "your-value",
        "SECURITY_MAX_JCL_BYTES": "your-value",
        "SECURITY_WRITE_APPROVAL": "your-value",
        "SECURITY_JCL_SCAN": "your-value",
        "SECURITY_JCL_SCAN_STRICT": "your-value",
        "SECURITY_BLOCKED_PROGRAMS": "your-value",
        "SECURITY_BLOCKED_JOB_CLASSES": "your-value",
        "SECURITY_CHANGE_TICKET_PATTERN": "your-value",
        "SECURITY_WRITE_WINDOW": "your-value",
        "SECURITY_WRITE_DAYS": "your-value",
        "SECURITY_WRITE_WINDOW_TZ": "your-value"
      }
    }
  }
}

Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.

Este se ejecuta en tu computadora, y ChatGPT solo puede conectarse a servidores en internet. Elige otra app.

Tu elección se guarda en una cookie en este dispositivo; no necesitas cuenta.

Valores que debes completar

ZOSMF_HOST obligatorio env
z/OSMF hostname or IP address
ZOSMF_PORT env
z/OSMF HTTPS port (default 443)
ZOSMF_BASE_PATH env
Optional API gateway or mediation layer prefix for z/OSMF
ZOSMF_USER env
z/OS user id (required with ZOSMF_PASSWORD unless ZOSMF_TOKEN is set)
ZOSMF_PASSWORD secreto env
Password for basic auth (required with ZOSMF_USER unless ZOSMF_TOKEN is set)
ZOSMF_TOKEN secreto env
Auth token (alternative to user/password)
ZOSMF_TOKEN_TYPE env
Token type when using ZOSMF_TOKEN (e.g. LTPA2)
ZOSMF_REJECT_UNAUTHORIZED env
Verify TLS certificates (true in production)
ZOSMF_CERT env
PEM client certificate file path for mTLS auth
ZOSMF_CERT_KEY env
PEM client key file path for mTLS auth (required with ZOSMF_CERT)
ZOSMF_TOKEN_FILE env
Read ZOSMF_TOKEN from this file at startup (vault/agent injection)
ZOSMF_USER_ID env
End-user id for PassTicket identity propagation (RACF sees this user, not the service account)
ZOSMF_PASSTICKET_APP env
RACF PTKTDATA application name for PassTicket generation (default ZOSMF)
ZOWE_TEAM_CONFIG env
Path to a zowe.config.json to import connection settings from (env vars win)
ZOSMF_PROFILE env
Profile name inside the Zowe team config (defaults to defaults.zosmf)
LOG_LEVEL env
Log level: fatal, error, warn, info, debug, trace, silent
MCP_TRANSPORT env
Transport: stdio (IDE) or sse (legacy HTTP+SSE for container/network deployments)
MCP_SSE_PORT env
Listen port when MCP_TRANSPORT=sse
MAX_JOB_OUTPUT_LINES env
Max lines returned from a single spool DD
MAX_DATASET_READ_LINES env
Max lines returned from dataset or USS reads
MAX_JES_SPOOL_FILES env
Max spool files fetched during diagnostics
MAX_AUDIT_LINES env
Max RACF audit log lines per query
CMCI_CONTEXT env
CICSplex name or region APPLID (required for CICS tools)
CMCI_HOST env
CMCI hostname (defaults to ZOSMF_HOST)
CMCI_PORT env
CMCI HTTPS port (default 1490)
CMCI_BASE_PATH env
CMCI REST base path
DB2_LOCATION env
Db2 subsystem location name (required for Db2 tools)
DB2_HOST env
Db2 REST hostname (defaults to ZOSMF_HOST)
DB2_PORT env
Db2 REST port (default 50400)
DB2_BASE_PATH env
Db2 REST base path
SMF_SUMMARY_DATASET env
Optional SMF summary dataset for offline metrics
RMF_METRICS_ENABLED env
Query z/OSMF RMF metrics when available
RACF_AUDIT_USS_PATH env
USS path to RACF audit log file
RACF_AUDIT_DATASET env
Sequential dataset containing RACF audit records
SECURITY_READ_ONLY env
When true (default), blocks write tools such as submit_jcl
SECURITY_ALLOWED_TOOLS env
Comma-separated allowlist of MCP tool names
SECURITY_BLOCKED_TOOLS env
Comma-separated blocklist of MCP tool names
SECURITY_ALLOWED_DATASET_PATTERNS env
Comma-separated dataset patterns (e.g. USERDEV.*,SYS1.*)
SECURITY_ALLOWED_USS_PATHS env
Comma-separated USS path prefixes
SECURITY_AUDIT_LOGGING env
Log every tool invocation to stderr (SIEM-friendly JSON)
SECURITY_MAX_JCL_BYTES env
Maximum inline JCL size for submit_jcl
SECURITY_WRITE_APPROVAL env
Human-in-the-loop: submit_jcl returns a one-time token and approve_write executes (default false)
SECURITY_JCL_SCAN env
Pre-flight scan JCL before submission: IDCAMS DELETE, IEFBR14 DISP DELETE, blocked utilities (default true)
SECURITY_JCL_SCAN_STRICT env
Strict scan mode: WARN findings also block submissions (default false)
SECURITY_BLOCKED_PROGRAMS env
Comma-separated EXEC programs that may never run (extends ADRDSSU,ICKDSF,IEHINITT)
SECURITY_BLOCKED_JOB_CLASSES env
Comma-separated JES job classes that may never be used
SECURITY_CHANGE_TICKET_PATTERN env
Regex a changeTicket argument must match on writes, e.g. CHG[0-9]{6}
SECURITY_WRITE_WINDOW env
Allowed write window, 24h HH:MM-HH:MM (overnight ranges allowed), e.g. 08:00-18:00
SECURITY_WRITE_DAYS env
Weekdays writes are allowed: 0=Sun..6=Sat, e.g. 1-5
SECURITY_WRITE_WINDOW_TZ env
IANA timezone for the write window (default UTC)

Esta configuración se genera a partir de la ficha del creador en el registro. Si el README dice otra cosa, sigue el README.

Qué puede hacer

Se ejecuta en tu computadora; la lista de herramientas aparece en tu app de IA después de instalarlo.

Revisiones básicasi

Revisamos información que cualquiera puede ver; no hemos leído el código. Las revisiones que no aplican no se cuentan. · Revisado el 7 nov 2026

✓ Superada
El creador coincide con el repo
El nombre en el registro se verificó con la cuenta de GitHub NotHarshhaa, dueña del repo
… Aún sin revisar
Sigue en mantenimiento
Todavía no hemos leído este repo en GitHub
… Aún sin revisar
Tiene licencia
Todavía no hemos leído este repo en GitHub
– No aplica
El endpoint responde
Este se ejecuta en tu computadora; no hay endpoint en internet
– No aplica
Inicio de sesión con OAuth
Se ejecuta en tu computadora y usa ajustes locales en su lugar
… Aún sin revisar
Sin instrucciones ocultas en las descripciones de herramientas
Se ejecuta en tu computadora; solo podemos leer listas de herramientas de endpoints en internet

Comparado con otros en Otrosi

Más estrellas que el 0% de los otros 32537 servidores de esta categoría
Publicado en el registro más recientemente que el 74% de los otros 32537 servidores de esta categoría
Revisiones básicas iguales o mejores que el 100% de los otros 32537 servidores de esta categoría

Comparado con todos los servidores activos de esta categoría en el registro. Las estrellas solo cuentan cuando quien lo publica es dueño del repo.

Preguntas frecuentes

¿Es seguro Mainframe MCP Server?

Superó 1 de 1 revisiones básicas aplicables. No hemos leído el código. Antes de agregar una clave o un token, revisa qué acceso pide el servidor y usa una clave que tenga solo los permisos que necesitas.

¿Qué claves o códigos necesita?

Debes completar: ZOSMF_HOST, ZOSMF_PASSWORD, ZOSMF_TOKEN

¿Se ejecuta en mi computadora o en la nube?

Se ejecuta en tu computadora. Tu app de IA lo inicia cuando hace falta, y los datos no pasan por los servidores del creador (a menos que el propio servidor llame a un servicio en línea).

¿Sigue en mantenimiento?

El repo de GitHub cambió por última vez –, y la última versión (3.0.0) llegó al registro hace 12 días.

¿Qué apps pueden usarlo?

Las apps compatibles con MCP, como Claude Desktop, Claude Code, Cursor y VS Code. También necesitas Node.js en tu computadora.

¿Qué puedo usar en su lugar?

En la misma categoría: Spec Driven Development, Remote Desktop Commander, TF Rooms

Alternativas

Servidores de la misma categoría hechos por otros creadores, ordenados por estrellas.

Cómo leer una tarjeta:★ Estrellas de GitHubiTres pilares: reseñas · revisiones · usoiActualizado = fecha en que se publicó la última versión en el registroi

Spec Driven Development

de formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

Se ejecuta en tu computadora★ 440MITActualizado hace 14 meses

Instalar

Remote Desktop Commander

de desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

Se ejecuta en la nube★ 211Actualizado ayer

Instalar

TF Rooms

de tfrooms.com

Live room availability, rates and stay quotes for 12 New Leaf motels in Twin Falls, Idaho.

Se ejecuta en la nubeActualizado hoy

Instalar

README del creador

Abrir el README

Copiado tal cual del repo del creador. PopNx MCP no lo ha revisado ni lo respalda. Se quitaron HTML, imágenes y scripts. Los enlaces llevan fuera de este sitio.

mainframe-mcp-server

MCP Server for IBM z/OS using Zowe APIs

An enterprise-grade Model Context Protocol (MCP) server for IBM z/OS environments.

Bridges MCP-compatible AI agents with mainframe resources — jobs, datasets, USS, and operational diagnostics — using the Zowe SDK (Open Mainframe Project) as the connectivity layer.

What it does
How it's different
z/OS prerequisites
Tools
Prompts & resources (MCP-native surface)
Enterprise security
Enterprise features
Per-user identity & SSO
Governed writes
Trust model & prompt injection
How the intelligence tools work
Incident management & runbooks
Quick start
Transports
Limits & timeouts
Troubleshooting & FAQ
Examples
Project & community
License
Trademarks

What it does

mainframe-mcp-server exposes z/OS capabilities as Model Context Protocol tools. An AI agent can list jobs, read datasets, inspect USS paths, submit JCL, and run operational diagnostics — without you writing Zowe CLI commands by hand.

Connectivity is handled by the Zowe SDK (Open Mainframe Project) over z/OSMF REST. This project adds the MCP tool layer, input validation, safety limits, and AI-friendly response formatting on top.

How it's different

	mainframe-mcp-server	Zowe CLI + scripts	Host IDE tooling (IDz, Z Open Editor)	Other z/OS MCP bridges
Interface	MCP tools for AI agents	Terminal commands, shell scripts	Eclipse/VS Code GUIs	MCP tools for AI agents
Output	Structured sections & tables tuned for LLM reasoning	Raw terminal text you must parse yourself	IDE views	Varies by project
Guardrails	Read-only by default, tool allow/block lists, dataset & USS boundaries, audit logging, JCL size cap	None built in — you script them	Client-side only	Varies by project
Failure knowledge	Curated abend-code reference, failing-step heuristics, risk scoring	Manual message lookup	Interactive debugging	Rare
Install	`npx` — no server-side footprint beyond z/OSMF access	Node + Zowe CLI + your scripts	Full IDE estate	Often heavier runtimes
Coverage	Jobs, datasets, USS, CICS, Db2, SMF/RMF, RACF audit (30+ tools)	Full Zowe command set	Edit, debug, compile	Varies

Honest positioning: the z/OS MCP ecosystem is early. IBM and community authors publish their own MCP bridges — evaluate them against your requirements. This project's differentiators are zero-dependency npm install, guardrails enforced at the server layer, and output shaped for LLM consumption rather than human eyes. It is not a replacement for Zowe CLI or IBM Z Open Editor — it is an MCP bridge over the same z/OSMF APIs.

z/OS prerequisites

The server is a pure client — nothing is installed on z/OS. It requires REST services that are enabled in standard z/OSMF estates.

z/OSMF (required — all core tools)

z/OSMF REST service	Used by	Notes
Jobs REST (`/zosmf/restjobs/jobs`)	`list_jobs`, `get_job_status`, `get_job_output`, `get_job_jcl`, `submit_jcl`, all operations & intelligence tools	List, query, spool content, JES submit
Files REST — datasets (`/zosmf/restfiles/ds`)	`list_datasets`, `search_dataset`, `read_dataset`, `search_members`, `get_dataset_info`	Catalog list, members, content read
Files REST — USS (`/zosmf/restfiles/fs`)	`list_uss_directory`, `read_uss_file`, `search_uss_files`, RACF audit source	Directory list, file read
z/OSMF info (`/info`)	`verify_zosmf_connection`	Optional; version read-out only
RMF REST (`/rmf/mvs/GPO/`)	`get_smf_metrics`	Optional; disabled with `RMF_METRICS_ENABLED=false`

Baseline: z/OS 2.4 LTS or later with APAR-current z/OSMF — the target the Zowe SDK (v8) is built against. Core job/dataset/USS tools are expected to work on z/OSMF levels from z/OS 2.3 onward; if you run an older or unusual level, open an issue with your results so the matrix can be updated.

CICS via CMCI (optional — `list_cics_regions`, `get_cics_region_status`, `list_cics_transactions`)

CICS TS 5.4 or later with CMCI active (a CICSPlex SM WUI region, or a single-region CMCI setup).
Set CMCI_CONTEXT (CICSplex name or region APPLID); optionally CMCI_HOST, CMCI_PORT (default 1490), CMCI_BASE_PATH (default /CICSSystemManagement).
The service account needs RACF/SAF authority to the CMCI data sets (XCSDATA/CICSPLEX resource classes as configured at your site).

Db2 REST (optional — `list_db2_subsystems`, `search_db2_catalog`)

Db2 12 for z/OS or later with the Db2 REST services capability exposed at DB2_HOST:DB2_PORT (default 50400, base path /dbrest) — direct DDF-served REST or fronted by your API mediation layer.
Set DB2_LOCATION (the subsystem location name). Tools run read-only catalog SQL against SYSIBM.SYSTABLES with literal-escaped, size-capped input.

RACF audit source (optional — `query_racf_audit`)

An existing audit extract the service account can read: a USS log file (RACF_AUDIT_USS_PATH) or a sequential dataset (RACF_AUDIT_DATASET), e.g. ADUINFOS/IRRADU00 output written to file. The server parses the text; it does not run IRRADU00 for you.

Service account

Use a dedicated z/OS user with least-privilege RACF profiles (job list/read authority, submit authority only if SECURITY_READ_ONLY=false).

Tools

Type legend: READ — reads z/OS state, never modifies anything · WRITE — submits work to JES · OFFLINE — no mainframe I/O at all.

Jobs

Tool	Type	Description
`list_jobs`	READ	List jobs by owner, prefix, or status
`get_job_status`	READ	Status and return code for a job
`get_job_output`	READ	Spool inventory or DD content
`submit_jcl`	WRITE	Submit inline JCL — governed by pre-flight scan, change ticket, change window, and optional human approval
`approve_write`	WRITE	Execute a pending JCL submission after human review (requires `SECURITY_WRITE_APPROVAL=true`)
`analyze_job_failure`	READ	Abend code, failing step, and suggested fix
`get_job_jcl`	READ	Retrieve submitted JCL from job spool

Datasets

Tool	Type	Description
`list_datasets`	READ	List datasets matching an HLQ pattern
`read_dataset`	READ	Read a sequential dataset or PDS member
`search_dataset`	READ	Search datasets by pattern
`search_members`	READ	Search or list PDS members
`get_dataset_info`	READ	Catalog attributes without reading content

USS

Tool	Type	Description
`list_uss_directory`	READ	List a USS directory
`read_uss_file`	READ	Read a USS file
`search_uss_files`	READ	Search files under a USS path

Operations

Tool	Type	Description
`find_failed_jobs`	READ	Failed jobs in a time window
`summarize_abends`	READ	Abend code breakdown across recent jobs
`system_health_summary`	READ	Active, queued, and failed job snapshot
`investigate_incident`	READ	Full incident bundle for a job
`lookup_abend_code`	OFFLINE	Abend reference lookup (S0C7, S806, S222, S0C4, …)
`verify_zosmf_connection`	READ	Test z/OSMF connectivity and auth
`compare_jobs`	READ	Side-by-side comparison of two jobs
`get_user_jobs_summary`	READ	Job counts by status for an owner

CICS

Requires optional CMCI configuration — see z/OS prerequisites.

Tool	Type	Description
`list_cics_regions`	READ	List CICS regions via CMCI REST
`get_cics_region_status`	READ	Status and attributes of a CICS region
`list_cics_transactions`	READ	Transaction definitions in a region
`get_cics_region_stats`	READ	Region statistics/attributes from the CMCI `CICSRegion` resource
`cics_newcopy`	WRITE	NEWCOPY a program via CMCI action (CICS TS 5.6+)
`cics_disable_transaction`	WRITE	Disable/enable a local transaction via CMCI SET action

Db2

Requires optional Db2 REST configuration — see z/OS prerequisites.

Tool	Type	Description
`list_db2_subsystems`	READ	List Db2 locations via Db2 REST
`search_db2_catalog`	READ	Read-only catalog search (tables, views, aliases)

Console & JES

Operator commands run through an extended MCS console (ZOSMF_CONSOLE_NAME); command tools are gated writes subject to read-only mode, policy roles, change tickets, and change windows.

Tool	Type	Description
`issue_console_command`	WRITE	MVS commands (`D A,L`, `D GRS,RES=…`) with follow-up message collection
`get_console_messages`	READ	Operations-log tail (SYSLOG-style console feed)
`hold_job` / `release_job`	WRITE	JES2 `$HJ` / `$OJ` job hold and release
`cancel_job`	WRITE	Cancel a job via the z/OSMF jobs API
`get_wlm_status`	WRITE	`D WLM` display (service policy / resources)
`ims_command`	WRITE	IMS commands via the system console (`/DIS ACTIVE`, `/DIS TRAN …`)
`get_hsm_activity`	READ	DFSMShsm recall/migration activity from the operations log
`analyze_logrec`	WRITE	Submit an EREP report against LOGREC and summarize error records

Schedulers

Tool	Type	Description
`scheduler_job_status`	READ	Control-M / CA 7 / IBM WLS job status via their REST APIs (`SCHEDULER_ADAPTERS`)

| job_dependencies | READ | JCL dataset-flow analysis — inputs, outp

Solo se muestra el principio; lee el resto en el repo

Mainframe MCP Server

Resumen

Los tres pilares de PopNx MCP

Qué puedes hacer con él

Instalación

Antes de instalar

Valores que debes completar

Qué puede hacer

Revisiones básicasi

El creador coincide con el repo

Sigue en mantenimiento

Tiene licencia

El endpoint responde

Inicio de sesión con OAuth

Sin instrucciones ocultas en las descripciones de herramientas

Comparado con otros en Otrosi

Preguntas frecuentes

Alternativas

Spec Driven Development

Remote Desktop Commander

TF Rooms

README del creador

Contents

What it does

How it's different

z/OS prerequisites

z/OSMF (required — all core tools)

CICS via CMCI (optional — list_cics_regions, get_cics_region_status, list_cics_transactions)

Db2 REST (optional — list_db2_subsystems, search_db2_catalog)

RACF audit source (optional — query_racf_audit)

Service account

Tools

Jobs

Datasets

USS

Operations

CICS

Db2

Console & JES

Schedulers

CICS via CMCI (optional — `list_cics_regions`, `get_cics_region_status`, `list_cics_transactions`)

Db2 REST (optional — `list_db2_subsystems`, `search_db2_catalog`)

RACF audit source (optional — `query_racf_audit`)