{"id":"igortodorovskiibm-zopen-mcp-server","name":"zopen-mcp-server","homepage":null,"repo_url":"https://github.com/IgorTodorovskiIBM/zopen-mcp-server","category":"infrastructure","subcategories":[],"tags":["mcp","zopen","zos","ssh","cli-integration","automation","go"],"what_it_does":"A Go-based Model Context Protocol (MCP) server that exposes a set of `zopen` command-line operations (list/query/install/remove/upgrade/info/version) as MCP tools. It supports stdio-based local execution (run tools on the same machine) and an optional remote mode that uses SSH to run `zopen` against a target z/OS system.","use_cases":["Integrate `zopen` package management capabilities into any MCP-compatible AI agent or tool runner","Automate z/OS zopen community package listing, querying, installation, removal, upgrades, and metadata lookup from an MCP client","Provide a controlled interface to zopen operations in local stdio deployments or via SSH to remote z/OS hosts"],"not_for":["Public-facing network services (it is designed for stdio/MCP or outbound SSH, not as an internet-exposed API)","Unattended operations without appropriate SSH credentials and permission scoping","Use cases requiring REST/HTTP/Webhooks integration or fine-grained API authorization models"],"best_when":"You have an MCP-capable client and want AI/agent tooling to drive zopen package management on local or authorized remote z/OS systems.","avoid_when":"You need an HTTP API (REST/GraphQL/gRPC), automated idempotent retries with explicit guidance, or documented rate-limit semantics for programmatic clients.","alternatives":["Direct use of the `zopen` CLI","A custom wrapper around `zopen` exposed via REST/gRPC with your own auth/rate limiting","Any existing MCP server that already provides similar z/OS package management capabilities"],"af_score":42.2,"security_score":33.8,"reliability_score":13.8,"package_type":"mcp_server","discovery_source":["github"],"priority":"low","status":"evaluated","version_evaluated":null,"last_evaluated":"2026-04-04T21:20:40.678210+00:00","interface":{"has_rest_api":false,"has_graphql":false,"has_grpc":false,"has_mcp_server":true,"mcp_server_url":null,"has_sdk":false,"sdk_languages":[],"openapi_spec_url":null,"webhooks":false},"auth":{"methods":["stdio/MCP (no auth described for local stdio)","SSH key authentication for remote execution (flag `--key`)"],"oauth":false,"scopes":false,"notes":"No explicit user/session auth is described for the MCP/stdio path; remote mode relies on the SSH user/key provided at launch."},"pricing":{"model":null,"free_tier_exists":false,"free_tier_limits":null,"paid_tiers":[],"requires_credit_card":false,"estimated_workload_costs":null,"notes":null},"requirements":{"requires_signup":false,"requires_credit_card":false,"domain_verification":false,"data_residency":[],"compliance":[],"min_contract":null},"agent_readiness":{"af_score":42.2,"security_score":33.8,"reliability_score":13.8,"mcp_server_quality":62.0,"documentation_accuracy":70.0,"error_message_quality":0.0,"error_message_notes":null,"auth_complexity":60.0,"rate_limit_clarity":5.0,"tls_enforcement":20.0,"auth_strength":45.0,"scope_granularity":20.0,"dependency_hygiene":30.0,"secret_handling":50.0,"security_notes":"Security model emphasizes isolation via stdio (no network port) for local mode and uses SSH for remote execution, inheriting the SSH user’s permissions. However, the README does not describe authentication/authorization for MCP access (stdio path), least-privilege guidance, host key verification settings, audit logging, or secret-handling practices for the provided SSH key.","uptime_documented":0.0,"version_stability":20.0,"breaking_changes_history":20.0,"error_recovery":15.0,"idempotency_support":"false","idempotency_notes":null,"pagination_style":"none","retry_guidance_documented":false,"known_agent_gotchas":["Remote mode executes `zopen` as the permissions of the configured SSH user; the agent may unintentionally install/upgrade/remove packages if prompts are not constrained.","No pagination/rate-limit guidance is provided in the README; agents should avoid assuming stable pagination or throttling semantics.","The README lists available tools but does not document tool input/output schemas, required parameters, or structured error codes, so robust automation may require inspecting the MCP server/tool definitions at runtime."]}}