Mainframe MCP server

by NotHarshhaa·io.github.NotHarshhaa/mainframe-mcp-server·v3.0.0

No reviews yet

MCP server for IBM z/OS jobs, datasets, USS, and operational diagnostics via Zowe SDK.

C55/100grade C

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

C55/100

not scanned yet

Adoption

New

40 downloads/wk

Reviews

Write one

Nobody has reviewed Mainframe yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Mainframe tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How Mainframe compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 55/100; higher than 10% of 48,273 servers
Downloads a week: 40; more than 33% of 11,915 servers with a package

Release history: 3 versions in the registry since 2026-06-08, latest 2026-10-25, typically one every 139 days.

Install Mainframe in Claude Code, Cursor or VS Code

Runs npx -y @notharshhaa/mainframe-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mainframe-mcp-server -- npx -y @notharshhaa/mainframe-mcp-server

Add to Cursor

Mainframe: common questions

Is Mainframe MCP server safe?: With care: it is graded C, so read the findings first (55/100). Read the Mainframe safety report
How do I install Mainframe?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Mainframe need an API key?: Yes. The registry entry asks for ZOSMF_PASSWORD, ZOSMF_TOKEN.
Is Mainframe maintained?: The latest release is v3.0.0.
How does Mainframe compare with other MCP servers?: safety score 55/100 (higher than 10% of 48,273 servers); downloads a week 40 (more than 33% of 11,915 servers with a package). Full comparison.

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: C · 55/100
Stars: –
Downloads/wk: 40
Price: Free
Licence: MIT
Transport: Local · npm
Version: 3.0.0
Category: Everything else
Last release: —

Credentials it needs

ZOSMF_HOSTz/OSMF hostname or IP address
ZOSMF_PORTz/OSMF HTTPS port (default 443)
ZOSMF_BASE_PATHOptional API gateway or mediation layer prefix for z/OSMF
ZOSMF_USERz/OS user id (required with ZOSMF_PASSWORD unless ZOSMF_TOKEN is set)
ZOSMF_PASSWORDsecretPassword for basic auth (required with ZOSMF_USER unless ZOSMF_TOKEN is set)
ZOSMF_TOKENsecretAuth token (alternative to user/password)
ZOSMF_TOKEN_TYPEToken type when using ZOSMF_TOKEN (e.g. LTPA2)
ZOSMF_REJECT_UNAUTHORIZEDVerify TLS certificates (true in production)
ZOSMF_CERTPEM client certificate file path for mTLS auth
ZOSMF_CERT_KEYPEM client key file path for mTLS auth (required with ZOSMF_CERT)
ZOSMF_TOKEN_FILERead ZOSMF_TOKEN from this file at startup (vault/agent injection)
ZOSMF_USER_IDEnd-user id for PassTicket identity propagation (RACF sees this user, not the service account)
ZOSMF_PASSTICKET_APPRACF PTKTDATA application name for PassTicket generation (default ZOSMF)
ZOWE_TEAM_CONFIGPath to a zowe.config.json to import connection settings from (env vars win)
ZOSMF_PROFILEProfile name inside the Zowe team config (defaults to defaults.zosmf)
LOG_LEVELLog level: fatal, error, warn, info, debug, trace, silent
MCP_TRANSPORTTransport: stdio (IDE) or sse (legacy HTTP+SSE for container/network deployments)
MCP_SSE_PORTListen port when MCP_TRANSPORT=sse
MAX_JOB_OUTPUT_LINESMax lines returned from a single spool DD
MAX_DATASET_READ_LINESMax lines returned from dataset or USS reads
MAX_JES_SPOOL_FILESMax spool files fetched during diagnostics
MAX_AUDIT_LINESMax RACF audit log lines per query
CMCI_CONTEXTCICSplex name or region APPLID (required for CICS tools)
CMCI_HOSTCMCI hostname (defaults to ZOSMF_HOST)
CMCI_PORTCMCI HTTPS port (default 1490)
CMCI_BASE_PATHCMCI REST base path
DB2_LOCATIONDb2 subsystem location name (required for Db2 tools)
DB2_HOSTDb2 REST hostname (defaults to ZOSMF_HOST)
DB2_PORTDb2 REST port (default 50400)
DB2_BASE_PATHDb2 REST base path
SMF_SUMMARY_DATASETOptional SMF summary dataset for offline metrics
RMF_METRICS_ENABLEDQuery z/OSMF RMF metrics when available
RACF_AUDIT_USS_PATHUSS path to RACF audit log file
RACF_AUDIT_DATASETSequential dataset containing RACF audit records
SECURITY_READ_ONLYWhen true (default), blocks write tools such as submit_jcl
SECURITY_ALLOWED_TOOLSComma-separated allowlist of MCP tool names
SECURITY_BLOCKED_TOOLSComma-separated blocklist of MCP tool names
SECURITY_ALLOWED_DATASET_PATTERNSComma-separated dataset patterns (e.g. USERDEV.*,SYS1.*)
SECURITY_ALLOWED_USS_PATHSComma-separated USS path prefixes
SECURITY_AUDIT_LOGGINGLog every tool invocation to stderr (SIEM-friendly JSON)
SECURITY_MAX_JCL_BYTESMaximum inline JCL size for submit_jcl
SECURITY_WRITE_APPROVALHuman-in-the-loop: submit_jcl returns a one-time token and approve_write executes (default false)
SECURITY_JCL_SCANPre-flight scan JCL before submission: IDCAMS DELETE, IEFBR14 DISP DELETE, blocked utilities (default true)
SECURITY_JCL_SCAN_STRICTStrict scan mode: WARN findings also block submissions (default false)
SECURITY_BLOCKED_PROGRAMSComma-separated EXEC programs that may never run (extends ADRDSSU,ICKDSF,IEHINITT)
SECURITY_BLOCKED_JOB_CLASSESComma-separated JES job classes that may never be used
SECURITY_CHANGE_TICKET_PATTERNRegex a changeTicket argument must match on writes, e.g. CHG[0-9]{6}
SECURITY_WRITE_WINDOWAllowed write window, 24h HH:MM-HH:MM (overnight ranges allowed), e.g. 08:00-18:00
SECURITY_WRITE_DAYSWeekdays writes are allowed: 0=Sun..6=Sat, e.g. 1-5
SECURITY_WRITE_WINDOW_TZIANA timezone for the write window (default UTC)

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/notharshhaa-mainframe-mcp-server.svg)](https://mcp.market/server/notharshhaa-mainframe-mcp-server)

How the badge works