Back to MCP Trust Indexm8ven
74
/ 100
2 days ago
github_code

zowe-mcp

Zowe MCP Server

→ zowe/zowe-mcp· listed on github_code
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for the top badge — read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Verified

Install from

GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: ZOWE_MCP_VAULT_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
🔐
You'll be asked for 4 credentials: ZOWE_MCP_DISABLE_SSH_KEY, ZOWE_MCP_MOCK_HOST_KEY, ZOWE_MCP_TENANT_STORE_KEY, ZOWE_MCP_VAULT_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configMCP_DISCOVERY_DIR
configNO_COLOR
configWORKSPACE_ID
configZOWE_EXPLORER_AVAILABLE
configZOWE_MCP_CAPABILITY_TIER
configZOWE_MCP_CEEDUMP_SAVE_DIR
configZOWE_MCP_CLI_DESC_VARIANT
configZOWE_MCP_CLI_PLUGINS_DIR
configZOWE_MCP_CREDENTIALS
configZOWE_MCP_DATA_MARKING
configZOWE_MCP_DEFAULT_MVS_ENCODING
configZOWE_MCP_DEFAULT_USS_ENCODING
🔐 secretZOWE_MCP_DISABLE_SSH_KEY
configZOWE_MCP_HOME
configZOWE_MCP_HTTP_ALLOW_NO_AUTH
configZOWE_MCP_HTTP_HOST
configZOWE_MCP_JOB_CARD_ELICIT_TIMEOUT_MS
configZOWE_MCP_JWKS_URI
configZOWE_MCP_JWT_AUDIENCE
configZOWE_MCP_JWT_ISSUER
configZOWE_MCP_LOCAL_FILES_ROOT
configZOWE_MCP_LOG_LEVEL
configZOWE_MCP_LOG_TOOL_CALLS
configZOWE_MCP_MOCK_CLOCK_ISO
configZOWE_MCP_MOCK_DIR
🔐 secretZOWE_MCP_MOCK_HOST_KEY
configZOWE_MCP_MOCK_JOB_ACTIVE_MS
configZOWE_MCP_NATIVE_RESPONSE_TIMEOUT
configZOWE_MCP_NATIVE_SERVER_AUTO_INSTALL
configZOWE_MCP_NATIVE_SERVER_PATH
configZOWE_MCP_OAUTH_RESOURCE
configZOWE_MCP_PASSWORD_CACHE_TTL_MS
configZOWE_MCP_PASSWORD_ELICIT_MODE
configZOWE_MCP_PASSWORD_ELICIT_URL_TIMEOUT_MS
configZOWE_MCP_PUBLIC_BASE_URL
configZOWE_MCP_REQUIRE_EXPLICIT_SYSTEM
configZOWE_MCP_RESPONSE_CACHE_DISABLE
configZOWE_MCP_RESPONSE_CACHE_MAX_BYTES
configZOWE_MCP_RESPONSE_CACHE_TTL_MINUTES
configZOWE_MCP_RESPONSE_CACHE_TTL_MS
configZOWE_MCP_SEARCH_FORCE_FALLBACK
configZOWE_MCP_TENANT_STORE_DIR
🔐 secretZOWE_MCP_TENANT_STORE_KEY
configZOWE_MCP_TRANSPORT
configZOWE_MCP_VAULT_ADDR
configZOWE_MCP_VAULT_CACHE_TTL_MS
configZOWE_MCP_VAULT_KV_PATH
🔐 secretZOWE_MCP_VAULT_TOKEN
configZOWE_MCP_WORKSPACE_DIR
configZOWE_MCP_ZOWEX_RESPONSE_TIMEOUT
configZOWE_MCP_ZOWEX_SERVER_AUTO_INSTALL
configZOWE_MCP_ZOWEX_SERVER_PATH
configZOWE_MCP_ZOWE_BIN
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 9 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/zowe-zowe-mcp-147oxk)](https://m8ven.ai/mcp/zowe-zowe-mcp-147oxk)
commit: 0344a50588ca26ac42fdb115faa6650d0474a7c0
code hash: 0f63cfce74e2d62ef140d6acb6b1c70916729df987d0eca953d51031cba67c4d
verified: 8/8/2026, 7:39:36 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client