zlib-mcp
zlib-mcp
Ein stdio-MCP-Server, der jedem KI-Agenten-Tool – Claude Code, Codex CLI, Cursor, Claude Desktop – die Möglichkeit gibt, in z-library zu suchen und Bücher herunterzuladen.
Bring dein eigenes Konto mit. Es gibt kein gemeinsames Backend, keinen API-Schlüssel, keinen Proxy: Der Server läuft auf deinem Rechner, spricht direkt mit z-library und nutzt deine Anmeldedaten und dein Kontingent.
Tools
Tool | Was es tut | Benötigt Anmeldedaten |
| Suche nach Titel / Autor / ISBN, mit Filtern für Format, Sprache und Jahr | ja |
| Direkten Download-Link für ein Buch abrufen (keine Datei wird geschrieben) | ja |
| Ein Buch in ein von dir konfiguriertes Verzeichnis herunterladen | ja |
| Verbleibendes Download-Kontingent für heute prüfen | ja |
| Einmaliger Helfer: E-Mail + Passwort gegen remix-Anmeldedaten eintauschen | nein |
zlib_download erscheint nur, wenn du ZLIB_DOWNLOAD_DIR gesetzt hast – ein MCP-Server, der standardmäßig überall Dateien schreiben kann, ist kein akzeptabler Standard. Du musst das Verzeichnis also selbst benennen.
Related MCP server: open-public-domain
Voraussetzungen
Node.js ≥ 20
Ein z-library-Konto
Einrichtung in 5 Minuten
1. Anmeldedaten besorgen
Wenn du deine remix_userid / remix_userkey bereits kennst, überspringe diesen Schritt. Andernfalls füge den Server nur mit deiner E-Mail und deinem Passwort hinzu (siehe die Konfigurationsausschnitte unten) und bitte deinen Agenten, einmal zlib_login auszuführen und die zurückgegebenen remix_id / remix_key dauerhaft in die Konfiguration einzutragen.
Du kannst es auch direkt aus einem Terminal ausführen:
ZLIB_EMAIL=you@example.com ZLIB_PASSWORD='…' npx zlib-mcp2. Server zum Client hinzufügen
Jeder Client akzeptiert dieselben drei Dinge: den Befehl npx, das Argument zlib-mcp und einen env-Block.
claude mcp add zlib \
--env ZLIB_REMIX_ID=123456 \
--env ZLIB_REMIX_KEY=your_remix_userkey \
--env ZLIB_DOWNLOAD_DIR="$HOME/Downloads/books" \
-- npx -y zlib-mcpOder bearbeite ~/.claude.json / .mcp.json direkt mit dem untenstehenden JSON.
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"zlib": {
"command": "npx",
"args": ["-y", "zlib-mcp"],
"env": {
"ZLIB_REMIX_ID": "123456",
"ZLIB_REMIX_KEY": "your_remix_userkey",
"ZLIB_DOWNLOAD_DIR": "/Users/you/Downloads/books"
}
}
}
}{
"mcpServers": {
"zlib": {
"command": "npx",
"args": ["-y", "zlib-mcp"],
"env": {
"ZLIB_REMIX_ID": "123456",
"ZLIB_REMIX_KEY": "your_remix_userkey",
"ZLIB_DOWNLOAD_DIR": "/Users/you/Downloads/books"
}
}
}
}[mcp_servers.zlib]
command = "npx"
args = ["-y", "zlib-mcp"]
[mcp_servers.zlib.env]
ZLIB_REMIX_ID = "123456"
ZLIB_REMIX_KEY = "your_remix_userkey"
ZLIB_DOWNLOAD_DIR = "/Users/you/Downloads/books"3. Ausprobieren
Finde Kleppmanns Designing Data-Intensive Applications im EPUB-Format und lade dann das erste Ergebnis herunter.
Konfiguration
Variable | Erforderlich | Standard | Hinweise |
| eines von zwei | — | Deine |
| eines von zwei | — | Deine |
| eines von zwei | — | Fallback: wird bei erster Nutzung gegen remix-Anmeldedaten eingetauscht |
| eines von zwei | — | Fallback, wird mit |
| nein |
| Upstream-Mirror; ändere ihn, wenn du blockiert wirst |
| nein | (nicht gesetzt → | Wohin Downloads geschrieben werden |
| nein |
| Dateien darüber benötigen |
| nein |
| Connect-Timeout pro Anfrage |
| nein |
| Setze |
| nein |
|
|
Priorität der Anmeldedaten
ZLIB_REMIX_ID+ZLIB_REMIX_KEYZwischengespeicherte Anmeldedaten von einem früheren
ZLIB_EMAIL-Login (~/.zlib-mcp/credentials.json, Modus600)ZLIB_EMAIL+ZLIB_PASSWORD→ Login erfolgt beim ersten Tool-Aufruf, nicht beim Start
Der Cache existiert, damit ein Neustart des Clients nicht jedes Mal einen neuen Login auslöst – wiederholte Logins sind es, die das Anti-Missbrauchssystem von z-library aufmerksam machen. Er speichert nur die remix-ID und den remix-Key; dein Passwort wird niemals auf die Festplatte geschrieben, protokolliert oder von einem Tool zurückgegeben. Unter Windows ist der Modus 600 wirkungslos (das Betriebssystem ignoriert POSIX-Berechtigungen) – setze ZLIB_CREDENTIAL_CACHE=0, falls das für dich relevant ist.
Wenn nichts konfiguriert ist, startet der Server trotzdem und listet seine Tools auf; ein Aufruf gibt Hinweise, was zu setzen ist. Er stürzt nicht ab – ein abgestürzter MCP-Server erscheint in den meisten Clients nur als „nicht verfügbar“, ohne dass etwas zu debuggen wäre.
Fehlerbehebung
„Upstream-Host … scheint diese Anfrage zu blockieren“ – der Mirror steht hinter einer Anti-Bot-Wand. Setze ZLIB_HOST auf einen anderen und starte den Client neu. Bekannte Mirrors ändern sich häufig; 1lib.sk ist derzeit blockiert, pkuedu.xyz funktioniert derzeit. Alles, was dieselben /eapi/*-Endpunkte bedient, funktioniert.
„z-library hat die aktuellen Anmeldedaten abgelehnt“ – dein remix-Key ist abgelaufen. Führe zlib_login erneut aus und aktualisiere die Konfiguration. Wenn du den E-Mail/Passwort-Fallback verwendest, lösche ~/.zlib-mcp/credentials.json, um einen neuen Login zu erzwingen.
„Download-Kontingent erreicht“ – kostenlose Konten erhalten eine begrenzte Anzahl von Downloads pro Tag. zlib_limits zeigt den Zähler; er wird auf der Seite von z-library um Mitternacht UTC zurückgesetzt.
Im Client erscheint nichts – prüfe das MCP-Log des Clients; dieser Server schreibt alle Diagnosen nach stderr. ZLIB_LOG_LEVEL=debug macht es gesprächiger.
zlib_download fehlt – du hast ZLIB_DOWNLOAD_DIR nicht gesetzt. Das ist beabsichtigt.
Entwicklung
pnpm install
pnpm check # format check → lint → typecheck → tests
pnpm buildUm eine unveröffentlichte Version direkt aus Git auszuprobieren, richte die command/args deines Clients auf
npx / ["-y", "github:shiyi-0x7f/zlib-mcp"] – das prepare-Skript baut es bei der Installation.
Tests treffen nie den echten Upstream – fetch ist überall gestubbt.
Rechtliches
Dieses Tool bietet nur API-Zugriff auf dein eigenes z-library-Konto. Es hostet nichts, verteilt nichts und enthält keine urheberrechtlich geschützten Inhalte. Dass deine Nutzung dort, wo du dich befindest, legal ist, liegt in deiner Verantwortung. Dein Konto, dein Kontingent, dein Risiko – ein wegen Missbrauchs gesperrtes Konto ist deins zu verlieren.
Lizenz
MIT
Available Tools
4 toolszlib_get_download_urlGet z-library download URLA
Get a direct download URL for one book. Requires the "id" and "hash" from a zlib_search result. The link is short-lived and tied to the session that fetched it — use it right away, never cache or reuse it. Fetching a link consumes one unit of the account's daily download allowance (see zlib_limits). This server cannot save files to disk: set the ZLIB_DOWNLOAD_DIR environment variable in the MCP client config to a directory you want downloads written to, then restart the server to enable zlib_download.
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | The "hash" field from the same zlib_search result. Must match the book_id. | |
| book_id | Yes | The "id" field from a zlib_search result. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries full responsibility—and it delivers: discloses short-lived session-bound links, no caching/reuse, daily allowance consumption, and the server's inability to save files unless an env var is set. This is exceptional behavioral disclosure for a tool with zero annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, each earning its place, with the primary action stated first. Slightly long due to the environment variable note, but no redundant filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers input provenance, link lifetime, usage constraint, allowance impact, and prerequisite server configuration. Missing explicit error behavior or response shape details, but the tool's output is simple (a URL) and no output schema exists.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both book_id and hash already described, including the 'must match' relationship. The description reiterates that they come from a zlib_search result but adds no new semantic detail beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get a direct download URL for one book') and identifies the required inputs (id and hash from zlib_search). This clearly differentiates it from siblings like zlib_search, zlib_limits, and zlib_login.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Clearly indicates when it should be used: after obtaining a zlib_search result, and warns to use the link immediately without caching or reuse. It also notes the allowance consumption and points to zlib_limits, though it doesn't explicitly state when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
zlib_limitsCheck z-library download quotaA
Check the z-library account's daily download allowance: how many downloads were used today, the daily cap, and how many remain. Call this before a batch of downloads, or when a download fails with a quota error. Takes no arguments and does not consume any allowance.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden, and it does well by stating that 'does not consume any allowance'—a key safety guarantee for a quota-check operation. It also implies the output fields (used, cap, remaining). It doesn't mention authentication requirements or error behavior if not logged in, which is a minor gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences deliver the core purpose, usage triggers, and side-effect profile without any filler. The most important information (what it checks) is front-loaded, followed by when to use it and the safety guarantee—every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple zero-parameter tool without an output schema, this description is quite complete: it lists the returned values (used, cap, remain) and when to call it. The main omission is whether authentication is required before calling, given the account-specific nature and the existence of zlib_login as a sibling.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema is empty with 100% coverage, so there are no parameters to describe. The description redundantly notes 'Takes no arguments,' which adds no semantic value but does confirm the expectation. A baseline of 4 is appropriate for zero-parameter tools.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Check') and clearly identifies the resource: the z-library account's daily download allowance. It details exactly what information is provided (used today, daily cap, remaining), which sets it apart from the sibling tools focused on searching, downloading, or logging in.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says when to call the tool: before a batch of downloads, or when a download fails with a quota error. It doesn't mention when not to use it or point to alternatives, but given there are no sibling tools that check quotas, the guidance is clear and sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
zlib_loginExchange z-library credentialsA
Exchange a z-library email + password for the long-lived remix credentials (remix_id / remix_key). This is a one-time setup helper, not a per-call login: put the returned values into your MCP client config as ZLIB_REMIX_ID and ZLIB_REMIX_KEY, then restart the server. The password is never stored, logged, or returned. Do not call this before every search.
| Name | Required | Description | Default |
|---|---|---|---|
| Yes | z-library account email. | ||
| password | Yes | z-library account password. Never echoed back, logged, or written to disk. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does so well: it discloses that the password is never stored, logged, or returned, that the returned credentials are long-lived, and that the server must be restarted. This goes well beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence earns its place: operation, lifecycle context, security disclosure, and anti-misuse warning. It is front-loaded with the core purpose and avoids redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema and no annotations, the description explains what the call returns, how to use the returned values, and the one-time nature of the operation. For a two-parameter setup tool, this is complete and actionable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents both parameters fully, so the baseline is 3. The description clarifies the overall purpose of email/password and the long-lived credentials, but adds no additional format or constraint semantics for the parameters themselves.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action and resource: 'Exchange a z-library email + password for the long-lived remix credentials (remix_id / remix_key).' It clearly distinguishes itself from the sibling search/download/limit tools by positioning as a one-time setup helper rather than a per-call operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says when to use ('one-time setup helper'), when not to ('not a per-call login', 'Do not call this before every search'), and what to do after calling (configure ZLIB_REMIX_ID/ZLIB_REMIX_KEY and restart). This gives an agent a clear decision boundary.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
zlib_searchSearch z-libraryA
Search z-library for books. Returns a trimmed list — each entry carries the "id" and "hash" that zlib_get_download_url and zlib_download require, plus title/author/year/language/extension/size. Present the candidates to the user and let them pick before downloading anything.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number, starting at 1. Default 1. | |
| limit | No | Results per page, 1-50, default 10. | |
| order | No | Upstream sort field, passed through as-is (e.g. "popular", "year"). | |
| query | Yes | Search keywords: book title, author name, or ISBN. Non-Latin scripts are supported — pass a Chinese title verbatim, do not transliterate or translate it. | |
| year_to | No | Latest publication year (inclusive). | |
| languages | No | Filter by language, e.g. ["english","chinese"]. Omit to accept any language. | |
| year_from | No | Earliest publication year (inclusive). | |
| extensions | No | Filter by file format, e.g. ["epub","pdf"]. Omit to accept any format. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and it does well: it says the result is a trimmed list, enumerates the fields each entry carries, and instructs not to download without user selection, implying a safe read-only search step. It does not mention pagination totals, error behavior, or auth requirements, which keeps it just below a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no waste: the first states the core action, the second adds the output shape and the required user-interaction step. It is front-loaded and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 8 parameters with full schema coverage and no output schema, the description compensates by explaining what the return entries contain and how they feed downstream tools. It is sufficient for correct invocation, though a note on pagination/total result behavior would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents every parameter clearly. The description adds no extra parameter-level detail beyond the output relationship, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Search z-library for books') and the resource ('z-library'), and distinguishes the tool from siblings by explaining it returns a candidate list with the id/hash that zlib_get_download_url and zlib_download require. This makes the tool's role in the download workflow immediately clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly tells the agent to present candidates to the user and let them pick before downloading anything, which defines when this tool should be used relative to the download siblings. It also names the downstream tools that consume its output, giving clear workflow placement.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v0.1.2- First observed
zlib_get_download_url - First observed
zlib_limits - First observed
zlib_login - First observed
zlib_search
TDQS
Scored across 4 tools
Each tool has a distinct purpose: search for books, fetch download URLs, check account limits, and handle login. No two tools overlap in functionality, making selection unambiguous.
All tools share the 'zlib_' prefix and most follow a verb-based pattern (search, get_download_url, login), but 'limits' is a noun rather than a verb like 'get_limits' or 'check_limits'. Minor deviation but still coherent.
With 4 tools covering search, URL generation, quota checking, and authentication, the set is well-scoped for a focused book download workflow. No redundant tools, and each one earns its place.
The descriptions repeatedly mention a 'zlib_download' tool and instructions for enabling it, but that tool is not included in the provided set. This leaves a critical gap in the core workflow, preventing actual file downloads.
Maintenance
Related MCP Connectors
An MCP server that gives your AI access to the source code and docs of all public github repos
Driflyte MCP server which lets AI assistants query topic-specific knowledge from web and GitHub.
Hosted MCP server connecting claude.ai, ChatGPT and other AI apps to your own computer
Official MCP server for Agentwork — delegate tasks to AI agents with human-in-the-loop
Related MCP Servers
- AlicenseAqualityCmaintenanceAn MCP server for searching and downloading books from Library Genesis, supporting EPUB, MOBI, PDF, and more through natural language queries.314 npm7MIT
- FlicenseNot gradedqualityDmaintenanceMCP server that gives AI agents access to the world's public domain library. Search, read, and navigate books and audiobooks from Project Gutenberg and LibriVox.-
- AlicenseAqualityDmaintenanceMCP server that lets AI agents search YouTube and fetch transcripts.23MIT
- AlicenseNot gradedqualityFmaintenanceMCP server for AI assistants to search and download ebooks from Z-Library and Anna's Archive, configured locally with automatic setup and download path.4AGPL 3.0