プロトタイプ · プレビュー版:公式レジストリのすべてのサーバーを掲載し、30分ごとに同期しています。レビューとアカウント機能は今後のステップで始まります。
PopNx MCPAIを使う人のためのMCPサーバー · やさしい言葉で解説

Mainframe MCP Server

作者:NotHarshhaaバージョン 3.0.0i★ –iパソコンで動く
レジストリ名io.github.NotHarshhaa/mainframe-mcp-server

インストール

概要

作者による説明(英語の原文)

MCP server for IBM z/OS jobs, datasets, USS, and operational diagnostics via Zowe SDK.

PopNx MCPの3つの柱

この3つを1つのスコアにまとめることはしません。意見、測定、人気はそれぞれ別のものだからです。

できること

このサーバーのやさしい解説はまだ書いていません。以下はレジストリから読み取った事実です。

  • 接続方法: パソコンで動く
  • トランスポート: stdio
  • カテゴリ: その他
  • 入力が必要なもの:ZOSMF_HOST, ZOSMF_PASSWORD, ZOSMF_TOKEN

インストール

使っているAIアプリを選んで、設定をコピーしてください。

インストールの前に

  • 基本チェック:1項目中1項目に合格
  • あなたのパソコンで、あなたのユーザーと同じ権限(ファイル、ネットワーク、アプリ)で動きます。
  • 自分で入力するもの: ZOSMF_HOST, ZOSMF_PORT, ZOSMF_BASE_PATH, ZOSMF_USER, ZOSMF_PASSWORD, ZOSMF_TOKEN, ZOSMF_TOKEN_TYPE, ZOSMF_REJECT_UNAUTHORIZED, ZOSMF_CERT, ZOSMF_CERT_KEY, ZOSMF_TOKEN_FILE, ZOSMF_USER_ID, ZOSMF_PASSTICKET_APP, ZOWE_TEAM_CONFIG, ZOSMF_PROFILE, LOG_LEVEL, MCP_TRANSPORT, MCP_SSE_PORT, MAX_JOB_OUTPUT_LINES, MAX_DATASET_READ_LINES, MAX_JES_SPOOL_FILES, MAX_AUDIT_LINES, CMCI_CONTEXT, CMCI_HOST, CMCI_PORT, CMCI_BASE_PATH, DB2_LOCATION, DB2_HOST, DB2_PORT, DB2_BASE_PATH, SMF_SUMMARY_DATASET, RMF_METRICS_ENABLED, RACF_AUDIT_USS_PATH, RACF_AUDIT_DATASET, SECURITY_READ_ONLY, SECURITY_ALLOWED_TOOLS, SECURITY_BLOCKED_TOOLS, SECURITY_ALLOWED_DATASET_PATTERNS, SECURITY_ALLOWED_USS_PATHS, SECURITY_AUDIT_LOGGING, SECURITY_MAX_JCL_BYTES, SECURITY_WRITE_APPROVAL, SECURITY_JCL_SCAN, SECURITY_JCL_SCAN_STRICT, SECURITY_BLOCKED_PROGRAMS, SECURITY_BLOCKED_JOB_CLASSES, SECURITY_CHANGE_TICKET_PATTERN, SECURITY_WRITE_WINDOW, SECURITY_WRITE_DAYS, SECURITY_WRITE_WINDOW_TZ

「秘密」と表示された値は、あなたのアカウントの鍵です。絶対に人に教えたり、チャットに貼り付けたりしないでください。

必要なもの

  • npmNode.jsのインストール(npxコマンドに必要)

どのアプリを使っていますか?

上でアプリを選んでください。選んだアプリを覚えておくので、次からはボタンに「…にインストール」と表示されます。

Claude Desktop → Settings → Developer → Edit Config を開き、claude_desktop_config.json にこれを貼り付けます

{
  "mcpServers": {
    "mainframe": {
      "command": "npx",
      "args": [
        "-y",
        "@notharshhaa/mainframe-mcp-server"
      ],
      "env": {
        "ZOSMF_HOST": "your-value",
        "ZOSMF_PORT": "your-value",
        "ZOSMF_BASE_PATH": "your-value",
        "ZOSMF_USER": "your-value",
        "ZOSMF_PASSWORD": "your-value",
        "ZOSMF_TOKEN": "your-value",
        "ZOSMF_TOKEN_TYPE": "your-value",
        "ZOSMF_REJECT_UNAUTHORIZED": "your-value",
        "ZOSMF_CERT": "your-value",
        "ZOSMF_CERT_KEY": "your-value",
        "ZOSMF_TOKEN_FILE": "your-value",
        "ZOSMF_USER_ID": "your-value",
        "ZOSMF_PASSTICKET_APP": "your-value",
        "ZOWE_TEAM_CONFIG": "your-value",
        "ZOSMF_PROFILE": "your-value",
        "LOG_LEVEL": "your-value",
        "MCP_TRANSPORT": "your-value",
        "MCP_SSE_PORT": "your-value",
        "MAX_JOB_OUTPUT_LINES": "your-value",
        "MAX_DATASET_READ_LINES": "your-value",
        "MAX_JES_SPOOL_FILES": "your-value",
        "MAX_AUDIT_LINES": "your-value",
        "CMCI_CONTEXT": "your-value",
        "CMCI_HOST": "your-value",
        "CMCI_PORT": "your-value",
        "CMCI_BASE_PATH": "your-value",
        "DB2_LOCATION": "your-value",
        "DB2_HOST": "your-value",
        "DB2_PORT": "your-value",
        "DB2_BASE_PATH": "your-value",
        "SMF_SUMMARY_DATASET": "your-value",
        "RMF_METRICS_ENABLED": "your-value",
        "RACF_AUDIT_USS_PATH": "your-value",
        "RACF_AUDIT_DATASET": "your-value",
        "SECURITY_READ_ONLY": "your-value",
        "SECURITY_ALLOWED_TOOLS": "your-value",
        "SECURITY_BLOCKED_TOOLS": "your-value",
        "SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
        "SECURITY_ALLOWED_USS_PATHS": "your-value",
        "SECURITY_AUDIT_LOGGING": "your-value",
        "SECURITY_MAX_JCL_BYTES": "your-value",
        "SECURITY_WRITE_APPROVAL": "your-value",
        "SECURITY_JCL_SCAN": "your-value",
        "SECURITY_JCL_SCAN_STRICT": "your-value",
        "SECURITY_BLOCKED_PROGRAMS": "your-value",
        "SECURITY_BLOCKED_JOB_CLASSES": "your-value",
        "SECURITY_CHANGE_TICKET_PATTERN": "your-value",
        "SECURITY_WRITE_WINDOW": "your-value",
        "SECURITY_WRITE_DAYS": "your-value",
        "SECURITY_WRITE_WINDOW_TZ": "your-value"
      }
    }
  }
}

ターミナルでこれを実行します

claude mcp add mainframe --env ZOSMF_HOST=your-value --env ZOSMF_PORT=your-value --env ZOSMF_BASE_PATH=your-value --env ZOSMF_USER=your-value --env ZOSMF_PASSWORD=your-value --env ZOSMF_TOKEN=your-value --env ZOSMF_TOKEN_TYPE=your-value --env ZOSMF_REJECT_UNAUTHORIZED=your-value --env ZOSMF_CERT=your-value --env ZOSMF_CERT_KEY=your-value --env ZOSMF_TOKEN_FILE=your-value --env ZOSMF_USER_ID=your-value --env ZOSMF_PASSTICKET_APP=your-value --env ZOWE_TEAM_CONFIG=your-value --env ZOSMF_PROFILE=your-value --env LOG_LEVEL=your-value --env MCP_TRANSPORT=your-value --env MCP_SSE_PORT=your-value --env MAX_JOB_OUTPUT_LINES=your-value --env MAX_DATASET_READ_LINES=your-value --env MAX_JES_SPOOL_FILES=your-value --env MAX_AUDIT_LINES=your-value --env CMCI_CONTEXT=your-value --env CMCI_HOST=your-value --env CMCI_PORT=your-value --env CMCI_BASE_PATH=your-value --env DB2_LOCATION=your-value --env DB2_HOST=your-value --env DB2_PORT=your-value --env DB2_BASE_PATH=your-value --env SMF_SUMMARY_DATASET=your-value --env RMF_METRICS_ENABLED=your-value --env RACF_AUDIT_USS_PATH=your-value --env RACF_AUDIT_DATASET=your-value --env SECURITY_READ_ONLY=your-value --env SECURITY_ALLOWED_TOOLS=your-value --env SECURITY_BLOCKED_TOOLS=your-value --env SECURITY_ALLOWED_DATASET_PATTERNS=your-value --env SECURITY_ALLOWED_USS_PATHS=your-value --env SECURITY_AUDIT_LOGGING=your-value --env SECURITY_MAX_JCL_BYTES=your-value --env SECURITY_WRITE_APPROVAL=your-value --env SECURITY_JCL_SCAN=your-value --env SECURITY_JCL_SCAN_STRICT=your-value --env SECURITY_BLOCKED_PROGRAMS=your-value --env SECURITY_BLOCKED_JOB_CLASSES=your-value --env SECURITY_CHANGE_TICKET_PATTERN=your-value --env SECURITY_WRITE_WINDOW=your-value --env SECURITY_WRITE_DAYS=your-value --env SECURITY_WRITE_WINDOW_TZ=your-value -- npx -y @notharshhaa/mainframe-mcp-server

動かす前に、空欄の値を入力してください。

Cursorで開く

または、設定を自分でコピーする

プロジェクトの .cursor/mcp.json、または ~/.cursor/mcp.json に貼り付けます

{
  "mcpServers": {
    "mainframe": {
      "command": "npx",
      "args": [
        "-y",
        "@notharshhaa/mainframe-mcp-server"
      ],
      "env": {
        "ZOSMF_HOST": "your-value",
        "ZOSMF_PORT": "your-value",
        "ZOSMF_BASE_PATH": "your-value",
        "ZOSMF_USER": "your-value",
        "ZOSMF_PASSWORD": "your-value",
        "ZOSMF_TOKEN": "your-value",
        "ZOSMF_TOKEN_TYPE": "your-value",
        "ZOSMF_REJECT_UNAUTHORIZED": "your-value",
        "ZOSMF_CERT": "your-value",
        "ZOSMF_CERT_KEY": "your-value",
        "ZOSMF_TOKEN_FILE": "your-value",
        "ZOSMF_USER_ID": "your-value",
        "ZOSMF_PASSTICKET_APP": "your-value",
        "ZOWE_TEAM_CONFIG": "your-value",
        "ZOSMF_PROFILE": "your-value",
        "LOG_LEVEL": "your-value",
        "MCP_TRANSPORT": "your-value",
        "MCP_SSE_PORT": "your-value",
        "MAX_JOB_OUTPUT_LINES": "your-value",
        "MAX_DATASET_READ_LINES": "your-value",
        "MAX_JES_SPOOL_FILES": "your-value",
        "MAX_AUDIT_LINES": "your-value",
        "CMCI_CONTEXT": "your-value",
        "CMCI_HOST": "your-value",
        "CMCI_PORT": "your-value",
        "CMCI_BASE_PATH": "your-value",
        "DB2_LOCATION": "your-value",
        "DB2_HOST": "your-value",
        "DB2_PORT": "your-value",
        "DB2_BASE_PATH": "your-value",
        "SMF_SUMMARY_DATASET": "your-value",
        "RMF_METRICS_ENABLED": "your-value",
        "RACF_AUDIT_USS_PATH": "your-value",
        "RACF_AUDIT_DATASET": "your-value",
        "SECURITY_READ_ONLY": "your-value",
        "SECURITY_ALLOWED_TOOLS": "your-value",
        "SECURITY_BLOCKED_TOOLS": "your-value",
        "SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
        "SECURITY_ALLOWED_USS_PATHS": "your-value",
        "SECURITY_AUDIT_LOGGING": "your-value",
        "SECURITY_MAX_JCL_BYTES": "your-value",
        "SECURITY_WRITE_APPROVAL": "your-value",
        "SECURITY_JCL_SCAN": "your-value",
        "SECURITY_JCL_SCAN_STRICT": "your-value",
        "SECURITY_BLOCKED_PROGRAMS": "your-value",
        "SECURITY_BLOCKED_JOB_CLASSES": "your-value",
        "SECURITY_CHANGE_TICKET_PATTERN": "your-value",
        "SECURITY_WRITE_WINDOW": "your-value",
        "SECURITY_WRITE_DAYS": "your-value",
        "SECURITY_WRITE_WINDOW_TZ": "your-value"
      }
    }
  }
}

ブラウザがアプリを開いてよいか確認し、そのあとアプリが設定を表示して確認を求めます。キーの値は空欄のままなので、自分で入力してください。

VS Codeで開く

または、設定を自分でコピーする

プロジェクトの .vscode/mcp.json に貼り付けます

{
  "servers": {
    "mainframe": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@notharshhaa/mainframe-mcp-server"
      ],
      "env": {
        "ZOSMF_HOST": "your-value",
        "ZOSMF_PORT": "your-value",
        "ZOSMF_BASE_PATH": "your-value",
        "ZOSMF_USER": "your-value",
        "ZOSMF_PASSWORD": "your-value",
        "ZOSMF_TOKEN": "your-value",
        "ZOSMF_TOKEN_TYPE": "your-value",
        "ZOSMF_REJECT_UNAUTHORIZED": "your-value",
        "ZOSMF_CERT": "your-value",
        "ZOSMF_CERT_KEY": "your-value",
        "ZOSMF_TOKEN_FILE": "your-value",
        "ZOSMF_USER_ID": "your-value",
        "ZOSMF_PASSTICKET_APP": "your-value",
        "ZOWE_TEAM_CONFIG": "your-value",
        "ZOSMF_PROFILE": "your-value",
        "LOG_LEVEL": "your-value",
        "MCP_TRANSPORT": "your-value",
        "MCP_SSE_PORT": "your-value",
        "MAX_JOB_OUTPUT_LINES": "your-value",
        "MAX_DATASET_READ_LINES": "your-value",
        "MAX_JES_SPOOL_FILES": "your-value",
        "MAX_AUDIT_LINES": "your-value",
        "CMCI_CONTEXT": "your-value",
        "CMCI_HOST": "your-value",
        "CMCI_PORT": "your-value",
        "CMCI_BASE_PATH": "your-value",
        "DB2_LOCATION": "your-value",
        "DB2_HOST": "your-value",
        "DB2_PORT": "your-value",
        "DB2_BASE_PATH": "your-value",
        "SMF_SUMMARY_DATASET": "your-value",
        "RMF_METRICS_ENABLED": "your-value",
        "RACF_AUDIT_USS_PATH": "your-value",
        "RACF_AUDIT_DATASET": "your-value",
        "SECURITY_READ_ONLY": "your-value",
        "SECURITY_ALLOWED_TOOLS": "your-value",
        "SECURITY_BLOCKED_TOOLS": "your-value",
        "SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
        "SECURITY_ALLOWED_USS_PATHS": "your-value",
        "SECURITY_AUDIT_LOGGING": "your-value",
        "SECURITY_MAX_JCL_BYTES": "your-value",
        "SECURITY_WRITE_APPROVAL": "your-value",
        "SECURITY_JCL_SCAN": "your-value",
        "SECURITY_JCL_SCAN_STRICT": "your-value",
        "SECURITY_BLOCKED_PROGRAMS": "your-value",
        "SECURITY_BLOCKED_JOB_CLASSES": "your-value",
        "SECURITY_CHANGE_TICKET_PATTERN": "your-value",
        "SECURITY_WRITE_WINDOW": "your-value",
        "SECURITY_WRITE_DAYS": "your-value",
        "SECURITY_WRITE_WINDOW_TZ": "your-value"
      }
    }
  }
}

ブラウザがアプリを開いてよいか確認し、そのあとアプリが設定を表示して確認を求めます。キーの値は空欄のままなので、自分で入力してください。

これはパソコンで動くサーバーですが、ChatGPTがつなげるのはインターネット上のサーバーだけです。ほかのアプリを選んでください。

選んだアプリは、この端末のCookieに保存されます。アカウントは不要です。

自分で入力する値

  • ZOSMF_HOST 必須 env
    z/OSMF hostname or IP address
  • ZOSMF_PORT env
    z/OSMF HTTPS port (default 443)
  • ZOSMF_BASE_PATH env
    Optional API gateway or mediation layer prefix for z/OSMF
  • ZOSMF_USER env
    z/OS user id (required with ZOSMF_PASSWORD unless ZOSMF_TOKEN is set)
  • ZOSMF_PASSWORD 秘密 env
    Password for basic auth (required with ZOSMF_USER unless ZOSMF_TOKEN is set)
  • ZOSMF_TOKEN 秘密 env
    Auth token (alternative to user/password)
  • ZOSMF_TOKEN_TYPE env
    Token type when using ZOSMF_TOKEN (e.g. LTPA2)
  • ZOSMF_REJECT_UNAUTHORIZED env
    Verify TLS certificates (true in production)
  • ZOSMF_CERT env
    PEM client certificate file path for mTLS auth
  • ZOSMF_CERT_KEY env
    PEM client key file path for mTLS auth (required with ZOSMF_CERT)
  • ZOSMF_TOKEN_FILE env
    Read ZOSMF_TOKEN from this file at startup (vault/agent injection)
  • ZOSMF_USER_ID env
    End-user id for PassTicket identity propagation (RACF sees this user, not the service account)
  • ZOSMF_PASSTICKET_APP env
    RACF PTKTDATA application name for PassTicket generation (default ZOSMF)
  • ZOWE_TEAM_CONFIG env
    Path to a zowe.config.json to import connection settings from (env vars win)
  • ZOSMF_PROFILE env
    Profile name inside the Zowe team config (defaults to defaults.zosmf)
  • LOG_LEVEL env
    Log level: fatal, error, warn, info, debug, trace, silent
  • MCP_TRANSPORT env
    Transport: stdio (IDE) or sse (legacy HTTP+SSE for container/network deployments)
  • MCP_SSE_PORT env
    Listen port when MCP_TRANSPORT=sse
  • MAX_JOB_OUTPUT_LINES env
    Max lines returned from a single spool DD
  • MAX_DATASET_READ_LINES env
    Max lines returned from dataset or USS reads
  • MAX_JES_SPOOL_FILES env
    Max spool files fetched during diagnostics
  • MAX_AUDIT_LINES env
    Max RACF audit log lines per query
  • CMCI_CONTEXT env
    CICSplex name or region APPLID (required for CICS tools)
  • CMCI_HOST env
    CMCI hostname (defaults to ZOSMF_HOST)
  • CMCI_PORT env
    CMCI HTTPS port (default 1490)
  • CMCI_BASE_PATH env
    CMCI REST base path
  • DB2_LOCATION env
    Db2 subsystem location name (required for Db2 tools)
  • DB2_HOST env
    Db2 REST hostname (defaults to ZOSMF_HOST)
  • DB2_PORT env
    Db2 REST port (default 50400)
  • DB2_BASE_PATH env
    Db2 REST base path
  • SMF_SUMMARY_DATASET env
    Optional SMF summary dataset for offline metrics
  • RMF_METRICS_ENABLED env
    Query z/OSMF RMF metrics when available
  • RACF_AUDIT_USS_PATH env
    USS path to RACF audit log file
  • RACF_AUDIT_DATASET env
    Sequential dataset containing RACF audit records
  • SECURITY_READ_ONLY env
    When true (default), blocks write tools such as submit_jcl
  • SECURITY_ALLOWED_TOOLS env
    Comma-separated allowlist of MCP tool names
  • SECURITY_BLOCKED_TOOLS env
    Comma-separated blocklist of MCP tool names
  • SECURITY_ALLOWED_DATASET_PATTERNS env
    Comma-separated dataset patterns (e.g. USERDEV.*,SYS1.*)
  • SECURITY_ALLOWED_USS_PATHS env
    Comma-separated USS path prefixes
  • SECURITY_AUDIT_LOGGING env
    Log every tool invocation to stderr (SIEM-friendly JSON)
  • SECURITY_MAX_JCL_BYTES env
    Maximum inline JCL size for submit_jcl
  • SECURITY_WRITE_APPROVAL env
    Human-in-the-loop: submit_jcl returns a one-time token and approve_write executes (default false)
  • SECURITY_JCL_SCAN env
    Pre-flight scan JCL before submission: IDCAMS DELETE, IEFBR14 DISP DELETE, blocked utilities (default true)
  • SECURITY_JCL_SCAN_STRICT env
    Strict scan mode: WARN findings also block submissions (default false)
  • SECURITY_BLOCKED_PROGRAMS env
    Comma-separated EXEC programs that may never run (extends ADRDSSU,ICKDSF,IEHINITT)
  • SECURITY_BLOCKED_JOB_CLASSES env
    Comma-separated JES job classes that may never be used
  • SECURITY_CHANGE_TICKET_PATTERN env
    Regex a changeTicket argument must match on writes, e.g. CHG[0-9]{6}
  • SECURITY_WRITE_WINDOW env
    Allowed write window, 24h HH:MM-HH:MM (overnight ranges allowed), e.g. 08:00-18:00
  • SECURITY_WRITE_DAYS env
    Weekdays writes are allowed: 0=Sun..6=Sat, e.g. 1-5
  • SECURITY_WRITE_WINDOW_TZ env
    IANA timezone for the write window (default UTC)

この設定は、作者のレジストリ登録情報から作成しています。READMEと違う場合は、READMEに従ってください。

できること

パソコンで動くサーバーです。インストールすると、ツール一覧がAIアプリに表示されます。

基本チェックi

誰でも見られる情報をチェックしており、コードは読んでいません。当てはまらない項目は数に入れていません。 · 2026年11月7日にチェック

  • ✓ 合格

    作者とリポジトリが一致

    レジストリ名は、リポジトリを所有するGitHubアカウント NotHarshhaa で確認済みです

  • … 未チェック

    今もメンテナンスされている

    このリポジトリはまだGitHubから読み取っていません

  • … 未チェック

    ライセンスがある

    このリポジトリはまだGitHubから読み取っていません

  • – 対象外

    エンドポイントが応答する

    これはパソコンで動くため、インターネット上のエンドポイントはありません

  • – 対象外

    OAuthでサインイン

    パソコンで動き、代わりにローカルの設定を使います

  • … 未チェック

    ツールの説明に隠れた指示がない

    パソコンで動くサーバーです。ツール一覧を読み取れるのは、インターネット上のエンドポイントがある場合だけです

その他のほかのサーバーとの比較i

  • このカテゴリのほかの32545件のうち0%よりスターが多い
  • このカテゴリのほかの32545件のうち74%より最近レジストリに公開
  • 基本チェックの結果が、このカテゴリのほかの32545件のうち100%と同じかそれ以上

レジストリでこのカテゴリにある有効なすべてのサーバーと比較しています。スターは、公開者がリポジトリの所有者である場合だけ数えます。

よくある質問

Mainframe MCP Serverは安全ですか?

当てはまる基本チェック1項目のうち1項目に合格しました。コードは読んでいません。キーやトークンを追加する前に、サーバーがどんなアクセスを求めているかを確認し、必要な権限だけを持つキーを使ってください。

どんなキーやコードが必要ですか?

入力が必要なもの:ZOSMF_HOST, ZOSMF_PASSWORD, ZOSMF_TOKEN

パソコンで動きますか、それともクラウドですか?

あなたのパソコンで動きます。必要なときにAIアプリが起動し、データは作者のサーバーを通りません(サーバー自体がオンラインサービスを呼び出す場合を除きます)。

今もメンテナンスされていますか?

GitHubリポジトリの最終更新は–、最新バージョン(3.0.0)がレジストリに届いたのは12 日前です。

どのアプリで使えますか?

Claude Desktop、Claude Code、Cursor、VS CodeなどのMCP対応アプリで使えます。パソコンにNode.jsも必要です。

代わりに使えるものは?

同じカテゴリには:Spec Driven Development, Remote Desktop Commander, Python MCP

代わりの候補

同じカテゴリで、ほかの作者が作ったサーバー。スターの多い順。

カードの見方:★ GitHubスターi3つの柱:レビュー · チェック · 利用状況i更新=最新バージョンをレジストリに公開した日i

Remote Desktop Commander

作者:desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

クラウドで動く★ 211昨日更新
インストール

作者のREADME

READMEを開く

作者のリポジトリから書かれたとおりにコピーしたものです。PopNx MCPは内容を確認・推奨していません。HTML、画像、スクリプトは取り除いています。リンクはこのサイトの外へ移動します。

mainframe-mcp-server

MCP Server for IBM z/OS using Zowe APIs

An enterprise-grade Model Context Protocol (MCP) server for IBM z/OS environments.

Bridges MCP-compatible AI agents with mainframe resources — jobs, datasets, USS, and operational diagnostics — using the Zowe SDK (Open Mainframe Project) as the connectivity layer.


Contents

  • What it does
  • How it's different
  • z/OS prerequisites
  • Tools
  • Prompts & resources (MCP-native surface)
  • Enterprise security
  • Enterprise features
  • Per-user identity & SSO
  • Governed writes
  • Trust model & prompt injection
  • How the intelligence tools work
  • Incident management & runbooks
  • Quick start
  • Transports
  • Limits & timeouts
  • Troubleshooting & FAQ
  • Examples
  • Project & community
  • License
  • Trademarks

What it does

mainframe-mcp-server exposes z/OS capabilities as Model Context Protocol tools. An AI agent can list jobs, read datasets, inspect USS paths, submit JCL, and run operational diagnostics — without you writing Zowe CLI commands by hand.

Connectivity is handled by the Zowe SDK (Open Mainframe Project) over z/OSMF REST. This project adds the MCP tool layer, input validation, safety limits, and AI-friendly response formatting on top.


How it's different

mainframe-mcp-serverZowe CLI + scriptsHost IDE tooling (IDz, Z Open Editor)Other z/OS MCP bridges
InterfaceMCP tools for AI agentsTerminal commands, shell scriptsEclipse/VS Code GUIsMCP tools for AI agents
OutputStructured sections & tables tuned for LLM reasoningRaw terminal text you must parse yourselfIDE viewsVaries by project
GuardrailsRead-only by default, tool allow/block lists, dataset & USS boundaries, audit logging, JCL size capNone built in — you script themClient-side onlyVaries by project
Failure knowledgeCurated abend-code reference, failing-step heuristics, risk scoringManual message lookupInteractive debuggingRare
Installnpx — no server-side footprint beyond z/OSMF accessNode + Zowe CLI + your scriptsFull IDE estateOften heavier runtimes
CoverageJobs, datasets, USS, CICS, Db2, SMF/RMF, RACF audit (30+ tools)Full Zowe command setEdit, debug, compileVaries

Honest positioning: the z/OS MCP ecosystem is early. IBM and community authors publish their own MCP bridges — evaluate them against your requirements. This project's differentiators are zero-dependency npm install, guardrails enforced at the server layer, and output shaped for LLM consumption rather than human eyes. It is not a replacement for Zowe CLI or IBM Z Open Editor — it is an MCP bridge over the same z/OSMF APIs.


z/OS prerequisites

The server is a pure client — nothing is installed on z/OS. It requires REST services that are enabled in standard z/OSMF estates.

z/OSMF (required — all core tools)
z/OSMF REST serviceUsed byNotes
Jobs REST (/zosmf/restjobs/jobs)list_jobs, get_job_status, get_job_output, get_job_jcl, submit_jcl, all operations & intelligence toolsList, query, spool content, JES submit
Files REST — datasets (/zosmf/restfiles/ds)list_datasets, search_dataset, read_dataset, search_members, get_dataset_infoCatalog list, members, content read
Files REST — USS (/zosmf/restfiles/fs)list_uss_directory, read_uss_file, search_uss_files, RACF audit sourceDirectory list, file read
z/OSMF info (/info)verify_zosmf_connectionOptional; version read-out only
RMF REST (/rmf/mvs/GPO/)get_smf_metricsOptional; disabled with RMF_METRICS_ENABLED=false

Baseline: z/OS 2.4 LTS or later with APAR-current z/OSMF — the target the Zowe SDK (v8) is built against. Core job/dataset/USS tools are expected to work on z/OSMF levels from z/OS 2.3 onward; if you run an older or unusual level, open an issue with your results so the matrix can be updated.

CICS via CMCI (optional — list_cics_regions, get_cics_region_status, list_cics_transactions)
  • CICS TS 5.4 or later with CMCI active (a CICSPlex SM WUI region, or a single-region CMCI setup).
  • Set CMCI_CONTEXT (CICSplex name or region APPLID); optionally CMCI_HOST, CMCI_PORT (default 1490), CMCI_BASE_PATH (default /CICSSystemManagement).
  • The service account needs RACF/SAF authority to the CMCI data sets (XCSDATA/CICSPLEX resource classes as configured at your site).
Db2 REST (optional — list_db2_subsystems, search_db2_catalog)
  • Db2 12 for z/OS or later with the Db2 REST services capability exposed at DB2_HOST:DB2_PORT (default 50400, base path /dbrest) — direct DDF-served REST or fronted by your API mediation layer.
  • Set DB2_LOCATION (the subsystem location name). Tools run read-only catalog SQL against SYSIBM.SYSTABLES with literal-escaped, size-capped input.
RACF audit source (optional — query_racf_audit)
  • An existing audit extract the service account can read: a USS log file (RACF_AUDIT_USS_PATH) or a sequential dataset (RACF_AUDIT_DATASET), e.g. ADUINFOS/IRRADU00 output written to file. The server parses the text; it does not run IRRADU00 for you.
Service account

Use a dedicated z/OS user with least-privilege RACF profiles (job list/read authority, submit authority only if SECURITY_READ_ONLY=false).


Tools

Type legend: READ — reads z/OS state, never modifies anything · WRITE — submits work to JES · OFFLINE — no mainframe I/O at all.

Jobs
ToolTypeDescription
list_jobsREADList jobs by owner, prefix, or status
get_job_statusREADStatus and return code for a job
get_job_outputREADSpool inventory or DD content
submit_jclWRITESubmit inline JCL — governed by pre-flight scan, change ticket, change window, and optional human approval
approve_writeWRITEExecute a pending JCL submission after human review (requires SECURITY_WRITE_APPROVAL=true)
analyze_job_failureREADAbend code, failing step, and suggested fix
get_job_jclREADRetrieve submitted JCL from job spool
Datasets
ToolTypeDescription
list_datasetsREADList datasets matching an HLQ pattern
read_datasetREADRead a sequential dataset or PDS member
search_datasetREADSearch datasets by pattern
search_membersREADSearch or list PDS members
get_dataset_infoREADCatalog attributes without reading content
USS
ToolTypeDescription
list_uss_directoryREADList a USS directory
read_uss_fileREADRead a USS file
search_uss_filesREADSearch files under a USS path
Operations
ToolTypeDescription
find_failed_jobsREADFailed jobs in a time window
summarize_abendsREADAbend code breakdown across recent jobs
system_health_summaryREADActive, queued, and failed job snapshot
investigate_incidentREADFull incident bundle for a job
lookup_abend_codeOFFLINEAbend reference lookup (S0C7, S806, S222, S0C4, …)
verify_zosmf_connectionREADTest z/OSMF connectivity and auth
compare_jobsREADSide-by-side comparison of two jobs
get_user_jobs_summaryREADJob counts by status for an owner
CICS

Requires optional CMCI configuration — see z/OS prerequisites.

ToolTypeDescription
list_cics_regionsREADList CICS regions via CMCI REST
get_cics_region_statusREADStatus and attributes of a CICS region
list_cics_transactionsREADTransaction definitions in a region
get_cics_region_statsREADRegion statistics/attributes from the CMCI CICSRegion resource
cics_newcopyWRITENEWCOPY a program via CMCI action (CICS TS 5.6+)
cics_disable_transactionWRITEDisable/enable a local transaction via CMCI SET action
Db2

Requires optional Db2 REST configuration — see z/OS prerequisites.

ToolTypeDescription
list_db2_subsystemsREADList Db2 locations via Db2 REST
search_db2_catalogREADRead-only catalog search (tables, views, aliases)
Console & JES

Operator commands run through an extended MCS console (ZOSMF_CONSOLE_NAME); command tools are gated writes subject to read-only mode, policy roles, change tickets, and change windows.

ToolTypeDescription
issue_console_commandWRITEMVS commands (D A,L, D GRS,RES=…) with follow-up message collection
get_console_messagesREADOperations-log tail (SYSLOG-style console feed)
hold_job / release_jobWRITEJES2 $HJ / $OJ job hold and release
cancel_jobWRITECancel a job via the z/OSMF jobs API
get_wlm_statusWRITED WLM display (service policy / resources)
ims_commandWRITEIMS commands via the system console (/DIS ACTIVE, /DIS TRAN …)
get_hsm_activityREADDFSMShsm recall/migration activity from the operations log
analyze_logrecWRITESubmit an EREP report against LOGREC and summarize error records
Schedulers
ToolTypeDescription
scheduler_job_statusREADControl-M / CA 7 / IBM WLS job status via their REST APIs (SCHEDULER_ADAPTERS)

| job_dependencies | READ | JCL dataset-flow analysis — inputs, outp

冒頭だけを表示しています。続きはリポジトリで読めます

PopNxに聞く