{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.NotHarshhaa/mainframe-mcp-server","description":"MCP server for IBM z/OS jobs, datasets, USS, and operational diagnostics via Zowe SDK.","repository":{"url":"https://github.com/NotHarshhaa/mainframe-mcp-server","source":"github"},"version":"3.0.0","packages":[{"registryType":"npm","identifier":"@notharshhaa/mainframe-mcp-server","version":"3.0.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"z/OSMF hostname or IP address","isRequired":true,"format":"string","name":"ZOSMF_HOST"},{"description":"z/OSMF HTTPS port (default 443)","format":"number","name":"ZOSMF_PORT"},{"description":"Optional API gateway or mediation layer prefix for z/OSMF","format":"string","name":"ZOSMF_BASE_PATH"},{"description":"z/OS user id (required with ZOSMF_PASSWORD unless ZOSMF_TOKEN is set)","format":"string","name":"ZOSMF_USER"},{"description":"Password for basic auth (required with ZOSMF_USER unless ZOSMF_TOKEN is set)","format":"string","isSecret":true,"name":"ZOSMF_PASSWORD"},{"description":"Auth token (alternative to user/password)","format":"string","isSecret":true,"name":"ZOSMF_TOKEN"},{"description":"Token type when using ZOSMF_TOKEN (e.g. LTPA2)","format":"string","name":"ZOSMF_TOKEN_TYPE"},{"description":"Verify TLS certificates (true in production)","format":"boolean","name":"ZOSMF_REJECT_UNAUTHORIZED"},{"description":"PEM client certificate file path for mTLS auth","format":"string","name":"ZOSMF_CERT"},{"description":"PEM client key file path for mTLS auth (required with ZOSMF_CERT)","format":"string","name":"ZOSMF_CERT_KEY"},{"description":"Read ZOSMF_TOKEN from this file at startup (vault/agent injection)","format":"string","name":"ZOSMF_TOKEN_FILE"},{"description":"End-user id for PassTicket identity propagation (RACF sees this user, not the service account)","format":"string","name":"ZOSMF_USER_ID"},{"description":"RACF PTKTDATA application name for PassTicket generation (default ZOSMF)","format":"string","name":"ZOSMF_PASSTICKET_APP"},{"description":"Path to a zowe.config.json to import connection settings from (env vars win)","format":"string","name":"ZOWE_TEAM_CONFIG"},{"description":"Profile name inside the Zowe team config (defaults to defaults.zosmf)","format":"string","name":"ZOSMF_PROFILE"},{"description":"Log level: fatal, error, warn, info, debug, trace, silent","format":"string","name":"LOG_LEVEL"},{"description":"Transport: stdio (IDE) or sse (legacy HTTP+SSE for container/network deployments)","format":"string","name":"MCP_TRANSPORT"},{"description":"Listen port when MCP_TRANSPORT=sse","format":"number","name":"MCP_SSE_PORT"},{"description":"Max lines returned from a single spool DD","format":"number","name":"MAX_JOB_OUTPUT_LINES"},{"description":"Max lines returned from dataset or USS reads","format":"number","name":"MAX_DATASET_READ_LINES"},{"description":"Max spool files fetched during diagnostics","format":"number","name":"MAX_JES_SPOOL_FILES"},{"description":"Max RACF audit log lines per query","format":"number","name":"MAX_AUDIT_LINES"},{"description":"CICSplex name or region APPLID (required for CICS tools)","format":"string","name":"CMCI_CONTEXT"},{"description":"CMCI hostname (defaults to ZOSMF_HOST)","format":"string","name":"CMCI_HOST"},{"description":"CMCI HTTPS port (default 1490)","format":"number","name":"CMCI_PORT"},{"description":"CMCI REST base path","format":"string","name":"CMCI_BASE_PATH"},{"description":"Db2 subsystem location name (required for Db2 tools)","format":"string","name":"DB2_LOCATION"},{"description":"Db2 REST hostname (defaults to ZOSMF_HOST)","format":"string","name":"DB2_HOST"},{"description":"Db2 REST port (default 50400)","format":"number","name":"DB2_PORT"},{"description":"Db2 REST base path","format":"string","name":"DB2_BASE_PATH"},{"description":"Optional SMF summary dataset for offline metrics","format":"string","name":"SMF_SUMMARY_DATASET"},{"description":"Query z/OSMF RMF metrics when available","format":"boolean","name":"RMF_METRICS_ENABLED"},{"description":"USS path to RACF audit log file","format":"string","name":"RACF_AUDIT_USS_PATH"},{"description":"Sequential dataset containing RACF audit records","format":"string","name":"RACF_AUDIT_DATASET"},{"description":"When true (default), blocks write tools such as submit_jcl","format":"boolean","name":"SECURITY_READ_ONLY"},{"description":"Comma-separated allowlist of MCP tool names","format":"string","name":"SECURITY_ALLOWED_TOOLS"},{"description":"Comma-separated blocklist of MCP tool names","format":"string","name":"SECURITY_BLOCKED_TOOLS"},{"description":"Comma-separated dataset patterns (e.g. USERDEV.*,SYS1.*)","format":"string","name":"SECURITY_ALLOWED_DATASET_PATTERNS"},{"description":"Comma-separated USS path prefixes","format":"string","name":"SECURITY_ALLOWED_USS_PATHS"},{"description":"Log every tool invocation to stderr (SIEM-friendly JSON)","format":"boolean","name":"SECURITY_AUDIT_LOGGING"},{"description":"Maximum inline JCL size for submit_jcl","format":"number","name":"SECURITY_MAX_JCL_BYTES"},{"description":"Human-in-the-loop: submit_jcl returns a one-time token and approve_write executes (default false)","format":"boolean","name":"SECURITY_WRITE_APPROVAL"},{"description":"Pre-flight scan JCL before submission: IDCAMS DELETE, IEFBR14 DISP DELETE, blocked utilities (default true)","format":"boolean","name":"SECURITY_JCL_SCAN"},{"description":"Strict scan mode: WARN findings also block submissions (default false)","format":"boolean","name":"SECURITY_JCL_SCAN_STRICT"},{"description":"Comma-separated EXEC programs that may never run (extends ADRDSSU,ICKDSF,IEHINITT)","format":"string","name":"SECURITY_BLOCKED_PROGRAMS"},{"description":"Comma-separated JES job classes that may never be used","format":"string","name":"SECURITY_BLOCKED_JOB_CLASSES"},{"description":"Regex a changeTicket argument must match on writes, e.g. CHG[0-9]{6}","format":"string","name":"SECURITY_CHANGE_TICKET_PATTERN"},{"description":"Allowed write window, 24h HH:MM-HH:MM (overnight ranges allowed), e.g. 08:00-18:00","format":"string","name":"SECURITY_WRITE_WINDOW"},{"description":"Weekdays writes are allowed: 0=Sun..6=Sat, e.g. 1-5","format":"string","name":"SECURITY_WRITE_DAYS"},{"description":"IANA timezone for the write window (default UTC)","format":"string","name":"SECURITY_WRITE_WINDOW_TZ"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-25T10:40:17.656391Z","publishedAt":"2026-10-25T10:40:17.656391Z","updatedAt":"2026-10-25T10:40:17.656391Z","isLatest":true}}}