Back to Browse
Free
Server data from the Official MCP Registry
MCP server for IBM z/OS jobs, datasets, USS, and operational diagnostics via Zowe SDK.
About
MCP server for IBM z/OS jobs, datasets, USS, and operational diagnostics via Zowe SDK.
Security Report
4.2
Use Caution4.2High RiskThis is a well-designed MCP server for z/OS mainframe operations with strong enterprise security controls and clear architecture. However, there are credential storage concerns in the recommended configuration, sensitive credential logging in audit trails, and incomplete input validation that warrant attention. Permissions are appropriate for the stated purpose (mainframe system access), but secrets management requires hardening beyond the documented approach. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
5 files analyzed · 13 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
z/OSMF hostname or IP address
Environment variable: ZOSMF_HOST
z/OSMF HTTPS port (default 443)
Environment variable: ZOSMF_PORT
Optional API gateway or mediation layer prefix for z/OSMF
Environment variable: ZOSMF_BASE_PATH
z/OS user id (required with ZOSMF_PASSWORD unless ZOSMF_TOKEN is set)
Environment variable: ZOSMF_USER
Password for basic auth (required with ZOSMF_USER unless ZOSMF_TOKEN is set)Required
Environment variable: ZOSMF_PASSWORD
Auth token (alternative to user/password)Required
Environment variable: ZOSMF_TOKEN
Token type when using ZOSMF_TOKEN (e.g. LTPA2)
Environment variable: ZOSMF_TOKEN_TYPE
Verify TLS certificates (true in production)
Environment variable: ZOSMF_REJECT_UNAUTHORIZED
Log level: fatal, error, warn, info, debug, trace, silent
Environment variable: LOG_LEVEL
Transport: stdio (IDE) or sse (container/network)
Environment variable: MCP_TRANSPORT
Listen port when MCP_TRANSPORT=sse
Environment variable: MCP_SSE_PORT
Max lines returned from a single spool DD
Environment variable: MAX_JOB_OUTPUT_LINES
Max lines returned from dataset or USS reads
Environment variable: MAX_DATASET_READ_LINES
Max spool files fetched during diagnostics
Environment variable: MAX_JES_SPOOL_FILES
Max RACF audit log lines per query
Environment variable: MAX_AUDIT_LINES
CICSplex name or region APPLID (required for CICS tools)
Environment variable: CMCI_CONTEXT
CMCI hostname (defaults to ZOSMF_HOST)
Environment variable: CMCI_HOST
CMCI HTTPS port (default 1490)
Environment variable: CMCI_PORT
CMCI REST base path
Environment variable: CMCI_BASE_PATH
Db2 subsystem location name (required for Db2 tools)
Environment variable: DB2_LOCATION
Db2 REST hostname (defaults to ZOSMF_HOST)
Environment variable: DB2_HOST
Db2 REST port (default 50400)
Environment variable: DB2_PORT
Db2 REST base path
Environment variable: DB2_BASE_PATH
Optional SMF summary dataset for offline metrics
Environment variable: SMF_SUMMARY_DATASET
Query z/OSMF RMF metrics when available
Environment variable: RMF_METRICS_ENABLED
USS path to RACF audit log file
Environment variable: RACF_AUDIT_USS_PATH
Sequential dataset containing RACF audit records
Environment variable: RACF_AUDIT_DATASET
When true, blocks write tools such as submit_jcl
Environment variable: SECURITY_READ_ONLY
Comma-separated allowlist of MCP tool names
Environment variable: SECURITY_ALLOWED_TOOLS
Comma-separated blocklist of MCP tool names
Environment variable: SECURITY_BLOCKED_TOOLS
Comma-separated dataset patterns (e.g. USERDEV.*,SYS1.*)
Environment variable: SECURITY_ALLOWED_DATASET_PATTERNS
Comma-separated USS path prefixes
Environment variable: SECURITY_ALLOWED_USS_PATHS
Log every tool invocation to stderr (SIEM-friendly JSON)
Environment variable: SECURITY_AUDIT_LOGGING
Maximum inline JCL size for submit_jcl
Environment variable: SECURITY_MAX_JCL_BYTES
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-notharshhaa-mainframe-mcp-server": {
"env": {
"DB2_HOST": "your-db2-host-here",
"DB2_PORT": "your-db2-port-here",
"CMCI_HOST": "your-cmci-host-here",
"CMCI_PORT": "your-cmci-port-here",
"LOG_LEVEL": "your-log-level-here",
"ZOSMF_HOST": "your-zosmf-host-here",
"ZOSMF_PORT": "your-zosmf-port-here",
"ZOSMF_USER": "your-zosmf-user-here",
"ZOSMF_TOKEN": "your-zosmf-token-here",
"CMCI_CONTEXT": "your-cmci-context-here",
"DB2_LOCATION": "your-db2-location-here",
"MCP_SSE_PORT": "your-mcp-sse-port-here",
"DB2_BASE_PATH": "your-db2-base-path-here",
"MCP_TRANSPORT": "your-mcp-transport-here",
"CMCI_BASE_PATH": "your-cmci-base-path-here",
"ZOSMF_PASSWORD": "your-zosmf-password-here",
"MAX_AUDIT_LINES": "your-max-audit-lines-here",
"ZOSMF_BASE_PATH": "your-zosmf-base-path-here",
"ZOSMF_TOKEN_TYPE": "your-zosmf-token-type-here",
"RACF_AUDIT_DATASET": "your-racf-audit-dataset-here",
"SECURITY_READ_ONLY": "your-security-read-only-here",
"MAX_JES_SPOOL_FILES": "your-max-jes-spool-files-here",
"RACF_AUDIT_USS_PATH": "your-racf-audit-uss-path-here",
"RMF_METRICS_ENABLED": "your-rmf-metrics-enabled-here",
"SMF_SUMMARY_DATASET": "your-smf-summary-dataset-here",
"MAX_JOB_OUTPUT_LINES": "your-max-job-output-lines-here",
"MAX_DATASET_READ_LINES": "your-max-dataset-read-lines-here",
"SECURITY_ALLOWED_TOOLS": "your-security-allowed-tools-here",
"SECURITY_AUDIT_LOGGING": "your-security-audit-logging-here",
"SECURITY_BLOCKED_TOOLS": "your-security-blocked-tools-here",
"SECURITY_MAX_JCL_BYTES": "your-security-max-jcl-bytes-here",
"ZOSMF_REJECT_UNAUTHORIZED": "your-zosmf-reject-unauthorized-here",
"SECURITY_ALLOWED_USS_PATHS": "your-security-allowed-uss-paths-here",
"SECURITY_ALLOWED_DATASET_PATTERNS": "your-security-allowed-dataset-patterns-here"
},
"args": [
"-y",
"@notharshhaa/mainframe-mcp-server"
],
"command": "npx"
}
}
}Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
80.0K
Stars
6
Installs
6.5
Security
No ratings yet
Local
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
80.0K
Stars
4
Installs
5.3
Security
No ratings yet
Local
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
137
Stars
521
Installs
8.0
Security
4.8
Local