Mainframe MCP Server

Name: Mainframe MCP Server
Author: NotHarshhaa

作者：NotHarshhaa版本 3.0.0i★ –i在你的电脑上运行

注册名称io.github.NotHarshhaa/mainframe-mcp-server

安装

概览

作者提供的说明（英文原文）

MCP server for IBM z/OS jobs, datasets, USS, and operational diagnostics via Zowe SDK.

PopNx MCP 的三大支柱

这三项永远不会合并成一个分数：意见、测量和人气是不同的东西。

用户评价i暂无评价评价功能将在后续阶段与账户功能一起开放
我们的基础检查i1 项中通过 1 项依据公开信息检查；尚未扫描代码
使用情况i尚未统计★ –

它能帮你做什么

我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。

连接方式: 在你的电脑上运行
传输方式: stdio
分类: 其他
你需要填写：ZOSMF_HOST, ZOSMF_PASSWORD, ZOSMF_TOKEN

安装

选择你使用的 AI 应用，然后复制设置。

安装之前

基础检查：1 项中通过 1 项
在你的电脑上运行，拥有你的用户账户的权限（文件、网络、应用）。
需要你自己填写： ZOSMF_HOST, ZOSMF_PORT, ZOSMF_BASE_PATH, ZOSMF_USER, ZOSMF_PASSWORD, ZOSMF_TOKEN, ZOSMF_TOKEN_TYPE, ZOSMF_REJECT_UNAUTHORIZED, ZOSMF_CERT, ZOSMF_CERT_KEY, ZOSMF_TOKEN_FILE, ZOSMF_USER_ID, ZOSMF_PASSTICKET_APP, ZOWE_TEAM_CONFIG, ZOSMF_PROFILE, LOG_LEVEL, MCP_TRANSPORT, MCP_SSE_PORT, MAX_JOB_OUTPUT_LINES, MAX_DATASET_READ_LINES, MAX_JES_SPOOL_FILES, MAX_AUDIT_LINES, CMCI_CONTEXT, CMCI_HOST, CMCI_PORT, CMCI_BASE_PATH, DB2_LOCATION, DB2_HOST, DB2_PORT, DB2_BASE_PATH, SMF_SUMMARY_DATASET, RMF_METRICS_ENABLED, RACF_AUDIT_USS_PATH, RACF_AUDIT_DATASET, SECURITY_READ_ONLY, SECURITY_ALLOWED_TOOLS, SECURITY_BLOCKED_TOOLS, SECURITY_ALLOWED_DATASET_PATTERNS, SECURITY_ALLOWED_USS_PATHS, SECURITY_AUDIT_LOGGING, SECURITY_MAX_JCL_BYTES, SECURITY_WRITE_APPROVAL, SECURITY_JCL_SCAN, SECURITY_JCL_SCAN_STRICT, SECURITY_BLOCKED_PROGRAMS, SECURITY_BLOCKED_JOB_CLASSES, SECURITY_CHANGE_TICKET_PATTERN, SECURITY_WRITE_WINDOW, SECURITY_WRITE_DAYS, SECURITY_WRITE_WINDOW_TZ

标为机密的值是你账户的钥匙。千万不要分享给别人，也不要粘贴到聊天里。

你需要

npm已安装 Node.js（用于 npx 命令）

你用的是哪个应用？

ClaudeClaude CodeCursorVS CodeChatGPT

在上方选择你的应用。我们会记住它，下次按钮会显示“安装到 …”。

打开 Claude Desktop → Settings → Developer → Edit Config，把下面的内容粘贴到 claude_desktop_config.json

{
  "mcpServers": {
    "mainframe": {
      "command": "npx",
      "args": [
        "-y",
        "@notharshhaa/mainframe-mcp-server"
      ],
      "env": {
        "ZOSMF_HOST": "your-value",
        "ZOSMF_PORT": "your-value",
        "ZOSMF_BASE_PATH": "your-value",
        "ZOSMF_USER": "your-value",
        "ZOSMF_PASSWORD": "your-value",
        "ZOSMF_TOKEN": "your-value",
        "ZOSMF_TOKEN_TYPE": "your-value",
        "ZOSMF_REJECT_UNAUTHORIZED": "your-value",
        "ZOSMF_CERT": "your-value",
        "ZOSMF_CERT_KEY": "your-value",
        "ZOSMF_TOKEN_FILE": "your-value",
        "ZOSMF_USER_ID": "your-value",
        "ZOSMF_PASSTICKET_APP": "your-value",
        "ZOWE_TEAM_CONFIG": "your-value",
        "ZOSMF_PROFILE": "your-value",
        "LOG_LEVEL": "your-value",
        "MCP_TRANSPORT": "your-value",
        "MCP_SSE_PORT": "your-value",
        "MAX_JOB_OUTPUT_LINES": "your-value",
        "MAX_DATASET_READ_LINES": "your-value",
        "MAX_JES_SPOOL_FILES": "your-value",
        "MAX_AUDIT_LINES": "your-value",
        "CMCI_CONTEXT": "your-value",
        "CMCI_HOST": "your-value",
        "CMCI_PORT": "your-value",
        "CMCI_BASE_PATH": "your-value",
        "DB2_LOCATION": "your-value",
        "DB2_HOST": "your-value",
        "DB2_PORT": "your-value",
        "DB2_BASE_PATH": "your-value",
        "SMF_SUMMARY_DATASET": "your-value",
        "RMF_METRICS_ENABLED": "your-value",
        "RACF_AUDIT_USS_PATH": "your-value",
        "RACF_AUDIT_DATASET": "your-value",
        "SECURITY_READ_ONLY": "your-value",
        "SECURITY_ALLOWED_TOOLS": "your-value",
        "SECURITY_BLOCKED_TOOLS": "your-value",
        "SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
        "SECURITY_ALLOWED_USS_PATHS": "your-value",
        "SECURITY_AUDIT_LOGGING": "your-value",
        "SECURITY_MAX_JCL_BYTES": "your-value",
        "SECURITY_WRITE_APPROVAL": "your-value",
        "SECURITY_JCL_SCAN": "your-value",
        "SECURITY_JCL_SCAN_STRICT": "your-value",
        "SECURITY_BLOCKED_PROGRAMS": "your-value",
        "SECURITY_BLOCKED_JOB_CLASSES": "your-value",
        "SECURITY_CHANGE_TICKET_PATTERN": "your-value",
        "SECURITY_WRITE_WINDOW": "your-value",
        "SECURITY_WRITE_DAYS": "your-value",
        "SECURITY_WRITE_WINDOW_TZ": "your-value"
      }
    }
  }
}

在终端中运行这条命令

claude mcp add mainframe --env ZOSMF_HOST=your-value --env ZOSMF_PORT=your-value --env ZOSMF_BASE_PATH=your-value --env ZOSMF_USER=your-value --env ZOSMF_PASSWORD=your-value --env ZOSMF_TOKEN=your-value --env ZOSMF_TOKEN_TYPE=your-value --env ZOSMF_REJECT_UNAUTHORIZED=your-value --env ZOSMF_CERT=your-value --env ZOSMF_CERT_KEY=your-value --env ZOSMF_TOKEN_FILE=your-value --env ZOSMF_USER_ID=your-value --env ZOSMF_PASSTICKET_APP=your-value --env ZOWE_TEAM_CONFIG=your-value --env ZOSMF_PROFILE=your-value --env LOG_LEVEL=your-value --env MCP_TRANSPORT=your-value --env MCP_SSE_PORT=your-value --env MAX_JOB_OUTPUT_LINES=your-value --env MAX_DATASET_READ_LINES=your-value --env MAX_JES_SPOOL_FILES=your-value --env MAX_AUDIT_LINES=your-value --env CMCI_CONTEXT=your-value --env CMCI_HOST=your-value --env CMCI_PORT=your-value --env CMCI_BASE_PATH=your-value --env DB2_LOCATION=your-value --env DB2_HOST=your-value --env DB2_PORT=your-value --env DB2_BASE_PATH=your-value --env SMF_SUMMARY_DATASET=your-value --env RMF_METRICS_ENABLED=your-value --env RACF_AUDIT_USS_PATH=your-value --env RACF_AUDIT_DATASET=your-value --env SECURITY_READ_ONLY=your-value --env SECURITY_ALLOWED_TOOLS=your-value --env SECURITY_BLOCKED_TOOLS=your-value --env SECURITY_ALLOWED_DATASET_PATTERNS=your-value --env SECURITY_ALLOWED_USS_PATHS=your-value --env SECURITY_AUDIT_LOGGING=your-value --env SECURITY_MAX_JCL_BYTES=your-value --env SECURITY_WRITE_APPROVAL=your-value --env SECURITY_JCL_SCAN=your-value --env SECURITY_JCL_SCAN_STRICT=your-value --env SECURITY_BLOCKED_PROGRAMS=your-value --env SECURITY_BLOCKED_JOB_CLASSES=your-value --env SECURITY_CHANGE_TICKET_PATTERN=your-value --env SECURITY_WRITE_WINDOW=your-value --env SECURITY_WRITE_DAYS=your-value --env SECURITY_WRITE_WINDOW_TZ=your-value -- npx -y @notharshhaa/mainframe-mcp-server

运行前请先填写空着的值。

在 Cursor 中打开

或者自己复制设置

粘贴到项目中的 .cursor/mcp.json，或 ~/.cursor/mcp.json

{
  "mcpServers": {
    "mainframe": {
      "command": "npx",
      "args": [
        "-y",
        "@notharshhaa/mainframe-mcp-server"
      ],
      "env": {
        "ZOSMF_HOST": "your-value",
        "ZOSMF_PORT": "your-value",
        "ZOSMF_BASE_PATH": "your-value",
        "ZOSMF_USER": "your-value",
        "ZOSMF_PASSWORD": "your-value",
        "ZOSMF_TOKEN": "your-value",
        "ZOSMF_TOKEN_TYPE": "your-value",
        "ZOSMF_REJECT_UNAUTHORIZED": "your-value",
        "ZOSMF_CERT": "your-value",
        "ZOSMF_CERT_KEY": "your-value",
        "ZOSMF_TOKEN_FILE": "your-value",
        "ZOSMF_USER_ID": "your-value",
        "ZOSMF_PASSTICKET_APP": "your-value",
        "ZOWE_TEAM_CONFIG": "your-value",
        "ZOSMF_PROFILE": "your-value",
        "LOG_LEVEL": "your-value",
        "MCP_TRANSPORT": "your-value",
        "MCP_SSE_PORT": "your-value",
        "MAX_JOB_OUTPUT_LINES": "your-value",
        "MAX_DATASET_READ_LINES": "your-value",
        "MAX_JES_SPOOL_FILES": "your-value",
        "MAX_AUDIT_LINES": "your-value",
        "CMCI_CONTEXT": "your-value",
        "CMCI_HOST": "your-value",
        "CMCI_PORT": "your-value",
        "CMCI_BASE_PATH": "your-value",
        "DB2_LOCATION": "your-value",
        "DB2_HOST": "your-value",
        "DB2_PORT": "your-value",
        "DB2_BASE_PATH": "your-value",
        "SMF_SUMMARY_DATASET": "your-value",
        "RMF_METRICS_ENABLED": "your-value",
        "RACF_AUDIT_USS_PATH": "your-value",
        "RACF_AUDIT_DATASET": "your-value",
        "SECURITY_READ_ONLY": "your-value",
        "SECURITY_ALLOWED_TOOLS": "your-value",
        "SECURITY_BLOCKED_TOOLS": "your-value",
        "SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
        "SECURITY_ALLOWED_USS_PATHS": "your-value",
        "SECURITY_AUDIT_LOGGING": "your-value",
        "SECURITY_MAX_JCL_BYTES": "your-value",
        "SECURITY_WRITE_APPROVAL": "your-value",
        "SECURITY_JCL_SCAN": "your-value",
        "SECURITY_JCL_SCAN_STRICT": "your-value",
        "SECURITY_BLOCKED_PROGRAMS": "your-value",
        "SECURITY_BLOCKED_JOB_CLASSES": "your-value",
        "SECURITY_CHANGE_TICKET_PATTERN": "your-value",
        "SECURITY_WRITE_WINDOW": "your-value",
        "SECURITY_WRITE_DAYS": "your-value",
        "SECURITY_WRITE_WINDOW_TZ": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

在 VS Code 中打开

或者自己复制设置

粘贴到项目中的 .vscode/mcp.json

{
  "servers": {
    "mainframe": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@notharshhaa/mainframe-mcp-server"
      ],
      "env": {
        "ZOSMF_HOST": "your-value",
        "ZOSMF_PORT": "your-value",
        "ZOSMF_BASE_PATH": "your-value",
        "ZOSMF_USER": "your-value",
        "ZOSMF_PASSWORD": "your-value",
        "ZOSMF_TOKEN": "your-value",
        "ZOSMF_TOKEN_TYPE": "your-value",
        "ZOSMF_REJECT_UNAUTHORIZED": "your-value",
        "ZOSMF_CERT": "your-value",
        "ZOSMF_CERT_KEY": "your-value",
        "ZOSMF_TOKEN_FILE": "your-value",
        "ZOSMF_USER_ID": "your-value",
        "ZOSMF_PASSTICKET_APP": "your-value",
        "ZOWE_TEAM_CONFIG": "your-value",
        "ZOSMF_PROFILE": "your-value",
        "LOG_LEVEL": "your-value",
        "MCP_TRANSPORT": "your-value",
        "MCP_SSE_PORT": "your-value",
        "MAX_JOB_OUTPUT_LINES": "your-value",
        "MAX_DATASET_READ_LINES": "your-value",
        "MAX_JES_SPOOL_FILES": "your-value",
        "MAX_AUDIT_LINES": "your-value",
        "CMCI_CONTEXT": "your-value",
        "CMCI_HOST": "your-value",
        "CMCI_PORT": "your-value",
        "CMCI_BASE_PATH": "your-value",
        "DB2_LOCATION": "your-value",
        "DB2_HOST": "your-value",
        "DB2_PORT": "your-value",
        "DB2_BASE_PATH": "your-value",
        "SMF_SUMMARY_DATASET": "your-value",
        "RMF_METRICS_ENABLED": "your-value",
        "RACF_AUDIT_USS_PATH": "your-value",
        "RACF_AUDIT_DATASET": "your-value",
        "SECURITY_READ_ONLY": "your-value",
        "SECURITY_ALLOWED_TOOLS": "your-value",
        "SECURITY_BLOCKED_TOOLS": "your-value",
        "SECURITY_ALLOWED_DATASET_PATTERNS": "your-value",
        "SECURITY_ALLOWED_USS_PATHS": "your-value",
        "SECURITY_AUDIT_LOGGING": "your-value",
        "SECURITY_MAX_JCL_BYTES": "your-value",
        "SECURITY_WRITE_APPROVAL": "your-value",
        "SECURITY_JCL_SCAN": "your-value",
        "SECURITY_JCL_SCAN_STRICT": "your-value",
        "SECURITY_BLOCKED_PROGRAMS": "your-value",
        "SECURITY_BLOCKED_JOB_CLASSES": "your-value",
        "SECURITY_CHANGE_TICKET_PATTERN": "your-value",
        "SECURITY_WRITE_WINDOW": "your-value",
        "SECURITY_WRITE_DAYS": "your-value",
        "SECURITY_WRITE_WINDOW_TZ": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用，然后应用会显示设置并请你确认。密钥的值会留空，由你自己填写。

这个服务器在你的电脑上运行，而 ChatGPT 只能连接互联网上的服务器。请选择其他应用。

你的选择通过 Cookie 保存在这台设备上，无需账户。

需要你填写的值

ZOSMF_HOST 必填 env
z/OSMF hostname or IP address
ZOSMF_PORT env
z/OSMF HTTPS port (default 443)
ZOSMF_BASE_PATH env
Optional API gateway or mediation layer prefix for z/OSMF
ZOSMF_USER env
z/OS user id (required with ZOSMF_PASSWORD unless ZOSMF_TOKEN is set)
ZOSMF_PASSWORD 机密 env
Password for basic auth (required with ZOSMF_USER unless ZOSMF_TOKEN is set)
ZOSMF_TOKEN 机密 env
Auth token (alternative to user/password)
ZOSMF_TOKEN_TYPE env
Token type when using ZOSMF_TOKEN (e.g. LTPA2)
ZOSMF_REJECT_UNAUTHORIZED env
Verify TLS certificates (true in production)
ZOSMF_CERT env
PEM client certificate file path for mTLS auth
ZOSMF_CERT_KEY env
PEM client key file path for mTLS auth (required with ZOSMF_CERT)
ZOSMF_TOKEN_FILE env
Read ZOSMF_TOKEN from this file at startup (vault/agent injection)
ZOSMF_USER_ID env
End-user id for PassTicket identity propagation (RACF sees this user, not the service account)
ZOSMF_PASSTICKET_APP env
RACF PTKTDATA application name for PassTicket generation (default ZOSMF)
ZOWE_TEAM_CONFIG env
Path to a zowe.config.json to import connection settings from (env vars win)
ZOSMF_PROFILE env
Profile name inside the Zowe team config (defaults to defaults.zosmf)
LOG_LEVEL env
Log level: fatal, error, warn, info, debug, trace, silent
MCP_TRANSPORT env
Transport: stdio (IDE) or sse (legacy HTTP+SSE for container/network deployments)
MCP_SSE_PORT env
Listen port when MCP_TRANSPORT=sse
MAX_JOB_OUTPUT_LINES env
Max lines returned from a single spool DD
MAX_DATASET_READ_LINES env
Max lines returned from dataset or USS reads
MAX_JES_SPOOL_FILES env
Max spool files fetched during diagnostics
MAX_AUDIT_LINES env
Max RACF audit log lines per query
CMCI_CONTEXT env
CICSplex name or region APPLID (required for CICS tools)
CMCI_HOST env
CMCI hostname (defaults to ZOSMF_HOST)
CMCI_PORT env
CMCI HTTPS port (default 1490)
CMCI_BASE_PATH env
CMCI REST base path
DB2_LOCATION env
Db2 subsystem location name (required for Db2 tools)
DB2_HOST env
Db2 REST hostname (defaults to ZOSMF_HOST)
DB2_PORT env
Db2 REST port (default 50400)
DB2_BASE_PATH env
Db2 REST base path
SMF_SUMMARY_DATASET env
Optional SMF summary dataset for offline metrics
RMF_METRICS_ENABLED env
Query z/OSMF RMF metrics when available
RACF_AUDIT_USS_PATH env
USS path to RACF audit log file
RACF_AUDIT_DATASET env
Sequential dataset containing RACF audit records
SECURITY_READ_ONLY env
When true (default), blocks write tools such as submit_jcl
SECURITY_ALLOWED_TOOLS env
Comma-separated allowlist of MCP tool names
SECURITY_BLOCKED_TOOLS env
Comma-separated blocklist of MCP tool names
SECURITY_ALLOWED_DATASET_PATTERNS env
Comma-separated dataset patterns (e.g. USERDEV.*,SYS1.*)
SECURITY_ALLOWED_USS_PATHS env
Comma-separated USS path prefixes
SECURITY_AUDIT_LOGGING env
Log every tool invocation to stderr (SIEM-friendly JSON)
SECURITY_MAX_JCL_BYTES env
Maximum inline JCL size for submit_jcl
SECURITY_WRITE_APPROVAL env
Human-in-the-loop: submit_jcl returns a one-time token and approve_write executes (default false)
SECURITY_JCL_SCAN env
Pre-flight scan JCL before submission: IDCAMS DELETE, IEFBR14 DISP DELETE, blocked utilities (default true)
SECURITY_JCL_SCAN_STRICT env
Strict scan mode: WARN findings also block submissions (default false)
SECURITY_BLOCKED_PROGRAMS env
Comma-separated EXEC programs that may never run (extends ADRDSSU,ICKDSF,IEHINITT)
SECURITY_BLOCKED_JOB_CLASSES env
Comma-separated JES job classes that may never be used
SECURITY_CHANGE_TICKET_PATTERN env
Regex a changeTicket argument must match on writes, e.g. CHG[0-9]{6}
SECURITY_WRITE_WINDOW env
Allowed write window, 24h HH:MM-HH:MM (overnight ranges allowed), e.g. 08:00-18:00
SECURITY_WRITE_DAYS env
Weekdays writes are allowed: 0=Sun..6=Sat, e.g. 1-5
SECURITY_WRITE_WINDOW_TZ env
IANA timezone for the write window (default UTC)

这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同，请以 README 为准。

它能做什么

它在你的电脑上运行；安装后，工具列表会显示在你的 AI 应用中。

基础检查i

我们检查的是任何人都能看到的信息；我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月7日

✓ 通过
作者与仓库一致
注册名称已通过 GitHub 账户 NotHarshhaa 验证，该账户拥有此仓库
… 尚未检查
仍在维护
我们还没有从 GitHub 读取这个仓库
… 尚未检查
有许可证
我们还没有从 GitHub 读取这个仓库
– 不适用
端点有响应
它在你的电脑上运行，没有互联网端点
– 不适用
使用 OAuth 登录
在你的电脑上运行，改用本地设置
… 尚未检查
工具描述中没有隐藏指令
它在你的电脑上运行；我们只能读取互联网端点的工具列表

与“其他”中的其他服务器比较i

星标数多于此分类中其他 32583 个服务器的 0%
发布到注册中心的时间比此分类中其他 32583 个服务器的 74% 更新
基础检查结果等于或优于此分类中其他 32583 个服务器的 100%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时，星标数才计入。

常见问题

Mainframe MCP Server 安全吗？

它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前，请先看看这个服务器要求哪些权限，并使用只具备所需权限的密钥。

它需要哪些密钥或代码？

你需要填写：ZOSMF_HOST, ZOSMF_PASSWORD, ZOSMF_TOKEN

它在我的电脑上运行还是在云端？

它在你的电脑上运行。你的 AI 应用会在需要时启动它，数据不会经过作者的服务器（除非它自己调用在线服务）。

它还在维护吗？

GitHub 仓库最后更新于–，最新版本（3.0.0）于12天前进入注册中心。

哪些应用可以使用它？

支持 MCP 的应用，例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Node.js。

有什么可以替代它？

同一分类中有：Spec Driven Development, Remote Desktop Commander, sync. labs

替代选择

同一分类中其他作者的服务器，按星标数排序。

如何看卡片：★ GitHub 星标i三大支柱：评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

Spec Driven Development

作者：formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

在你的电脑上运行★ 440MIT14个月前更新

安装

Remote Desktop Commander

作者：desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

在云端运行★ 211昨天更新

安装

sync. labs

作者：synchronicity-labs

Lipsync videos, dub them into other languages, make talking videos and open sync. Studio.

电脑或云端今天更新

安装

作者的 README

打开 README

按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。

mainframe-mcp-server

MCP Server for IBM z/OS using Zowe APIs

An enterprise-grade Model Context Protocol (MCP) server for IBM z/OS environments.

Bridges MCP-compatible AI agents with mainframe resources — jobs, datasets, USS, and operational diagnostics — using the Zowe SDK (Open Mainframe Project) as the connectivity layer.

What it does
How it's different
z/OS prerequisites
Tools
Prompts & resources (MCP-native surface)
Enterprise security
Enterprise features
Per-user identity & SSO
Governed writes
Trust model & prompt injection
How the intelligence tools work
Incident management & runbooks
Quick start
Transports
Limits & timeouts
Troubleshooting & FAQ
Examples
Project & community
License
Trademarks

What it does

mainframe-mcp-server exposes z/OS capabilities as Model Context Protocol tools. An AI agent can list jobs, read datasets, inspect USS paths, submit JCL, and run operational diagnostics — without you writing Zowe CLI commands by hand.

Connectivity is handled by the Zowe SDK (Open Mainframe Project) over z/OSMF REST. This project adds the MCP tool layer, input validation, safety limits, and AI-friendly response formatting on top.

How it's different

	mainframe-mcp-server	Zowe CLI + scripts	Host IDE tooling (IDz, Z Open Editor)	Other z/OS MCP bridges
Interface	MCP tools for AI agents	Terminal commands, shell scripts	Eclipse/VS Code GUIs	MCP tools for AI agents
Output	Structured sections & tables tuned for LLM reasoning	Raw terminal text you must parse yourself	IDE views	Varies by project
Guardrails	Read-only by default, tool allow/block lists, dataset & USS boundaries, audit logging, JCL size cap	None built in — you script them	Client-side only	Varies by project
Failure knowledge	Curated abend-code reference, failing-step heuristics, risk scoring	Manual message lookup	Interactive debugging	Rare
Install	`npx` — no server-side footprint beyond z/OSMF access	Node + Zowe CLI + your scripts	Full IDE estate	Often heavier runtimes
Coverage	Jobs, datasets, USS, CICS, Db2, SMF/RMF, RACF audit (30+ tools)	Full Zowe command set	Edit, debug, compile	Varies

Honest positioning: the z/OS MCP ecosystem is early. IBM and community authors publish their own MCP bridges — evaluate them against your requirements. This project's differentiators are zero-dependency npm install, guardrails enforced at the server layer, and output shaped for LLM consumption rather than human eyes. It is not a replacement for Zowe CLI or IBM Z Open Editor — it is an MCP bridge over the same z/OSMF APIs.

z/OS prerequisites

The server is a pure client — nothing is installed on z/OS. It requires REST services that are enabled in standard z/OSMF estates.

z/OSMF (required — all core tools)

z/OSMF REST service	Used by	Notes
Jobs REST (`/zosmf/restjobs/jobs`)	`list_jobs`, `get_job_status`, `get_job_output`, `get_job_jcl`, `submit_jcl`, all operations & intelligence tools	List, query, spool content, JES submit
Files REST — datasets (`/zosmf/restfiles/ds`)	`list_datasets`, `search_dataset`, `read_dataset`, `search_members`, `get_dataset_info`	Catalog list, members, content read
Files REST — USS (`/zosmf/restfiles/fs`)	`list_uss_directory`, `read_uss_file`, `search_uss_files`, RACF audit source	Directory list, file read
z/OSMF info (`/info`)	`verify_zosmf_connection`	Optional; version read-out only
RMF REST (`/rmf/mvs/GPO/`)	`get_smf_metrics`	Optional; disabled with `RMF_METRICS_ENABLED=false`

Baseline: z/OS 2.4 LTS or later with APAR-current z/OSMF — the target the Zowe SDK (v8) is built against. Core job/dataset/USS tools are expected to work on z/OSMF levels from z/OS 2.3 onward; if you run an older or unusual level, open an issue with your results so the matrix can be updated.

CICS via CMCI (optional — `list_cics_regions`, `get_cics_region_status`, `list_cics_transactions`)

CICS TS 5.4 or later with CMCI active (a CICSPlex SM WUI region, or a single-region CMCI setup).
Set CMCI_CONTEXT (CICSplex name or region APPLID); optionally CMCI_HOST, CMCI_PORT (default 1490), CMCI_BASE_PATH (default /CICSSystemManagement).
The service account needs RACF/SAF authority to the CMCI data sets (XCSDATA/CICSPLEX resource classes as configured at your site).

Db2 REST (optional — `list_db2_subsystems`, `search_db2_catalog`)

Db2 12 for z/OS or later with the Db2 REST services capability exposed at DB2_HOST:DB2_PORT (default 50400, base path /dbrest) — direct DDF-served REST or fronted by your API mediation layer.
Set DB2_LOCATION (the subsystem location name). Tools run read-only catalog SQL against SYSIBM.SYSTABLES with literal-escaped, size-capped input.

RACF audit source (optional — `query_racf_audit`)

An existing audit extract the service account can read: a USS log file (RACF_AUDIT_USS_PATH) or a sequential dataset (RACF_AUDIT_DATASET), e.g. ADUINFOS/IRRADU00 output written to file. The server parses the text; it does not run IRRADU00 for you.

Service account

Use a dedicated z/OS user with least-privilege RACF profiles (job list/read authority, submit authority only if SECURITY_READ_ONLY=false).

Tools

Type legend: READ — reads z/OS state, never modifies anything · WRITE — submits work to JES · OFFLINE — no mainframe I/O at all.

Jobs

Tool	Type	Description
`list_jobs`	READ	List jobs by owner, prefix, or status
`get_job_status`	READ	Status and return code for a job
`get_job_output`	READ	Spool inventory or DD content
`submit_jcl`	WRITE	Submit inline JCL — governed by pre-flight scan, change ticket, change window, and optional human approval
`approve_write`	WRITE	Execute a pending JCL submission after human review (requires `SECURITY_WRITE_APPROVAL=true`)
`analyze_job_failure`	READ	Abend code, failing step, and suggested fix
`get_job_jcl`	READ	Retrieve submitted JCL from job spool

Datasets

Tool	Type	Description
`list_datasets`	READ	List datasets matching an HLQ pattern
`read_dataset`	READ	Read a sequential dataset or PDS member
`search_dataset`	READ	Search datasets by pattern
`search_members`	READ	Search or list PDS members
`get_dataset_info`	READ	Catalog attributes without reading content

USS

Tool	Type	Description
`list_uss_directory`	READ	List a USS directory
`read_uss_file`	READ	Read a USS file
`search_uss_files`	READ	Search files under a USS path

Operations

Tool	Type	Description
`find_failed_jobs`	READ	Failed jobs in a time window
`summarize_abends`	READ	Abend code breakdown across recent jobs
`system_health_summary`	READ	Active, queued, and failed job snapshot
`investigate_incident`	READ	Full incident bundle for a job
`lookup_abend_code`	OFFLINE	Abend reference lookup (S0C7, S806, S222, S0C4, …)
`verify_zosmf_connection`	READ	Test z/OSMF connectivity and auth
`compare_jobs`	READ	Side-by-side comparison of two jobs
`get_user_jobs_summary`	READ	Job counts by status for an owner

CICS

Requires optional CMCI configuration — see z/OS prerequisites.

Tool	Type	Description
`list_cics_regions`	READ	List CICS regions via CMCI REST
`get_cics_region_status`	READ	Status and attributes of a CICS region
`list_cics_transactions`	READ	Transaction definitions in a region
`get_cics_region_stats`	READ	Region statistics/attributes from the CMCI `CICSRegion` resource
`cics_newcopy`	WRITE	NEWCOPY a program via CMCI action (CICS TS 5.6+)
`cics_disable_transaction`	WRITE	Disable/enable a local transaction via CMCI SET action

Db2

Requires optional Db2 REST configuration — see z/OS prerequisites.

Tool	Type	Description
`list_db2_subsystems`	READ	List Db2 locations via Db2 REST
`search_db2_catalog`	READ	Read-only catalog search (tables, views, aliases)

Console & JES

Operator commands run through an extended MCS console (ZOSMF_CONSOLE_NAME); command tools are gated writes subject to read-only mode, policy roles, change tickets, and change windows.

Tool	Type	Description
`issue_console_command`	WRITE	MVS commands (`D A,L`, `D GRS,RES=…`) with follow-up message collection
`get_console_messages`	READ	Operations-log tail (SYSLOG-style console feed)
`hold_job` / `release_job`	WRITE	JES2 `$HJ` / `$OJ` job hold and release
`cancel_job`	WRITE	Cancel a job via the z/OSMF jobs API
`get_wlm_status`	WRITE	`D WLM` display (service policy / resources)
`ims_command`	WRITE	IMS commands via the system console (`/DIS ACTIVE`, `/DIS TRAN …`)
`get_hsm_activity`	READ	DFSMShsm recall/migration activity from the operations log
`analyze_logrec`	WRITE	Submit an EREP report against LOGREC and summarize error records

Schedulers

Tool	Type	Description
`scheduler_job_status`	READ	Control-M / CA 7 / IBM WLS job status via their REST APIs (`SCHEDULER_ADAPTERS`)

| job_dependencies | READ | JCL dataset-flow analysis — inputs, outp

只显示了开头部分；其余内容请在仓库中阅读