zlib-mcp
zlib-mcp
stdio MCP サーバーで、あらゆる AI エージェントツール(Claude Code、Codex CLI、Cursor、Claude Desktop)に z-library の検索と書籍のダウンロード 機能を提供します。
アカウントはご自身のものを使用します。 共有バックエンドも API キーもプロキシもありません。サーバーはあなたのマシン上で動作し、z-library に直接接続して、あなたの認証情報とクォータを使用します。
ツール
ツール | 説明 | 認証情報が必要 |
| タイトル / 著者 / ISBN で検索。形式・言語・年のフィルターに対応 | 必要 |
| 1冊の書籍の直接ダウンロードリンクを取得します(ファイルは書き込まれません) | 必要 |
| 設定したディレクトリに書籍をダウンロードします | 必要 |
| 本日の残りダウンロード枠を確認します | 必要 |
| 一回限りのヘルパー: メールアドレス + パスワードを remix 認証情報に交換します | 不要 |
zlib_download は ZLIB_DOWNLOAD_DIR を設定した場合にのみ表示されます。デフォルトで任意の場所にファイルを書き込める MCP サーバーは許容できるデフォルトではないため、ディレクトリは自分で指定する必要があります。
Related MCP server: open-public-domain
要件
Node.js ≥ 20
z-library アカウント
5分でセットアップ
1. 認証情報を取得する
すでに remix_userid / remix_userkey をご存知の場合は、先に進んでください。それ以外の場合は、メールアドレスとパスワードだけでサーバーを追加し(下記の設定スニペットを参照)、エージェントに zlib_login を一度実行してもらい、返された remix_id / remix_key を設定に恒久的に記入してください。
ターミナルから直接実行することもできます:
ZLIB_EMAIL=you@example.com ZLIB_PASSWORD='…' npx zlib-mcp2. サーバーをクライアントに追加する
すべてのクライアントで同じ3つの要素を使用します: コマンド npx、引数 zlib-mcp、そして env ブロックです。
claude mcp add zlib \
--env ZLIB_REMIX_ID=123456 \
--env ZLIB_REMIX_KEY=your_remix_userkey \
--env ZLIB_DOWNLOAD_DIR="$HOME/Downloads/books" \
-- npx -y zlib-mcpまたは、以下の JSON を使用して ~/.claude.json / .mcp.json を直接編集してください。
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"zlib": {
"command": "npx",
"args": ["-y", "zlib-mcp"],
"env": {
"ZLIB_REMIX_ID": "123456",
"ZLIB_REMIX_KEY": "your_remix_userkey",
"ZLIB_DOWNLOAD_DIR": "/Users/you/Downloads/books"
}
}
}
}{
"mcpServers": {
"zlib": {
"command": "npx",
"args": ["-y", "zlib-mcp"],
"env": {
"ZLIB_REMIX_ID": "123456",
"ZLIB_REMIX_KEY": "your_remix_userkey",
"ZLIB_DOWNLOAD_DIR": "/Users/you/Downloads/books"
}
}
}
}[mcp_servers.zlib]
command = "npx"
args = ["-y", "zlib-mcp"]
[mcp_servers.zlib.env]
ZLIB_REMIX_ID = "123456"
ZLIB_REMIX_KEY = "your_remix_userkey"
ZLIB_DOWNLOAD_DIR = "/Users/you/Downloads/books"3. 試してみる
Kleppmann の Designing Data-Intensive Applications を epub で探して、最初の結果をダウンロードしてください。
設定
変数 | 必須 | デフォルト | 備考 |
| 2つのうち1つ | — | あなたの |
| 2つのうち1つ | — | あなたの |
| 2つのうち1つ | — | フォールバック: 初回使用時に remix 認証情報に交換されます |
| 2つのうち1つ | — | フォールバック。 |
| 不要 |
| 上流ミラー。ブロックされた場合は変更してください |
| 不要 | (未設定 → | ダウンロードの書き込み先 |
| 不要 |
| これを超えるファイルには |
| 不要 |
| リクエストごとの接続タイムアウト |
| 不要 |
|
|
| 不要 |
|
|
認証情報の優先順位
ZLIB_REMIX_ID+ZLIB_REMIX_KEY以前の
ZLIB_EMAILログインからのキャッシュされた認証情報(~/.zlib-mcp/credentials.json、モード600)ZLIB_EMAIL+ZLIB_PASSWORD→ 最初のツール呼び出し時にログイン(起動時ではありません)
キャッシュは、クライアントを再起動しても毎回新しいログインが発生しないようにするためにあります。繰り返しのログインこそが、z-library の不正利用防止システムにあなたが目をつけられる原因です。キャッシュには remix id とキーのみが保存されます。パスワードがディスクに書き込まれたり、ログに記録されたり、いかなるツールからも返されたりすることはありません。 Windows では 600 モードは何も行いません(OS が POSIX パーミッションを無視するため)。それが気になる場合は ZLIB_CREDENTIAL_CACHE=0 を設定してください。
何も設定されていなくても、サーバーは起動してツールを一覧表示します。ツールを呼び出すと、設定すべき内容の説明が返されます。クラッシュはしません。クラッシュした MCP サーバーは、ほとんどのクライアントで「利用不可」と表示されるだけで、デバッグの手がかりが何もありません。
トラブルシューティング
「上流ホスト … がこのリクエストをブロックしているようです」 — ミラーがアンチボットの壁の背後にあります。ZLIB_HOST を別のものに設定して、クライアントを再起動してください。既知のミラーは頻繁に変わります。1lib.sk は現在ブロックされており、pkuedu.xyz は現在動作しています。同じ /eapi/* エンドポイントを提供するものであれば何でも構いません。
「z-library が現在の認証情報を拒否しました」 — remix キーが期限切れです。zlib_login を再度実行して設定を更新してください。メールアドレス/パスワードのフォールバックを使用している場合は、~/.zlib-mcp/credentials.json を削除して新しいログインを強制してください。
「ダウンロードクォータに達しました」 — 無料アカウントは1日あたりのダウンロード数がわずかです。zlib_limits でカウンターを確認できます。カウンターは UTC の午前0時に z-library 側でリセットされます。
クライアントに何も表示されない — クライアントの MCP ログを確認してください。このサーバーはすべての診断情報を stderr に書き込みます。ZLIB_LOG_LEVEL=debug にするとより詳細な出力になります。
zlib_download がない — ZLIB_DOWNLOAD_DIR を設定していません。これは仕様です。
開発
pnpm install
pnpm check # format check → lint → typecheck → tests
pnpm build未リリース版を git から直接試すには、クライアントの command / args を npx / ["-y", "github:shiyi-0x7f/zlib-mcp"] に指定してください。prepare スクリプトがインストール時にビルドします。
テストは実際の上流には決してアクセスしません。fetch はすべてスタブ化されています。
法的情報
このツールは あなた自身の z-library アカウントへの API アクセスのみを提供します。何もホストせず、何も配布せず、著作権で保護されたコンテンツを一切同梱しません。お住まいの地域でこのツールの使用が合法であることを確認する責任はあなたにあります。あなたのアカウント、あなたのクォータ、あなたのリスク — 不正利用で停止されたアカウントは、あなたが失うものです。
ライセンス
MIT
Available Tools
4 toolszlib_get_download_urlGet z-library download URLA
Get a direct download URL for one book. Requires the "id" and "hash" from a zlib_search result. The link is short-lived and tied to the session that fetched it — use it right away, never cache or reuse it. Fetching a link consumes one unit of the account's daily download allowance (see zlib_limits). This server cannot save files to disk: set the ZLIB_DOWNLOAD_DIR environment variable in the MCP client config to a directory you want downloads written to, then restart the server to enable zlib_download.
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | The "hash" field from the same zlib_search result. Must match the book_id. | |
| book_id | Yes | The "id" field from a zlib_search result. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries full responsibility—and it delivers: discloses short-lived session-bound links, no caching/reuse, daily allowance consumption, and the server's inability to save files unless an env var is set. This is exceptional behavioral disclosure for a tool with zero annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, each earning its place, with the primary action stated first. Slightly long due to the environment variable note, but no redundant filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers input provenance, link lifetime, usage constraint, allowance impact, and prerequisite server configuration. Missing explicit error behavior or response shape details, but the tool's output is simple (a URL) and no output schema exists.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both book_id and hash already described, including the 'must match' relationship. The description reiterates that they come from a zlib_search result but adds no new semantic detail beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get a direct download URL for one book') and identifies the required inputs (id and hash from zlib_search). This clearly differentiates it from siblings like zlib_search, zlib_limits, and zlib_login.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Clearly indicates when it should be used: after obtaining a zlib_search result, and warns to use the link immediately without caching or reuse. It also notes the allowance consumption and points to zlib_limits, though it doesn't explicitly state when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
zlib_limitsCheck z-library download quotaA
Check the z-library account's daily download allowance: how many downloads were used today, the daily cap, and how many remain. Call this before a batch of downloads, or when a download fails with a quota error. Takes no arguments and does not consume any allowance.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden, and it does well by stating that 'does not consume any allowance'—a key safety guarantee for a quota-check operation. It also implies the output fields (used, cap, remaining). It doesn't mention authentication requirements or error behavior if not logged in, which is a minor gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences deliver the core purpose, usage triggers, and side-effect profile without any filler. The most important information (what it checks) is front-loaded, followed by when to use it and the safety guarantee—every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple zero-parameter tool without an output schema, this description is quite complete: it lists the returned values (used, cap, remain) and when to call it. The main omission is whether authentication is required before calling, given the account-specific nature and the existence of zlib_login as a sibling.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema is empty with 100% coverage, so there are no parameters to describe. The description redundantly notes 'Takes no arguments,' which adds no semantic value but does confirm the expectation. A baseline of 4 is appropriate for zero-parameter tools.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Check') and clearly identifies the resource: the z-library account's daily download allowance. It details exactly what information is provided (used today, daily cap, remaining), which sets it apart from the sibling tools focused on searching, downloading, or logging in.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says when to call the tool: before a batch of downloads, or when a download fails with a quota error. It doesn't mention when not to use it or point to alternatives, but given there are no sibling tools that check quotas, the guidance is clear and sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
zlib_loginExchange z-library credentialsA
Exchange a z-library email + password for the long-lived remix credentials (remix_id / remix_key). This is a one-time setup helper, not a per-call login: put the returned values into your MCP client config as ZLIB_REMIX_ID and ZLIB_REMIX_KEY, then restart the server. The password is never stored, logged, or returned. Do not call this before every search.
| Name | Required | Description | Default |
|---|---|---|---|
| Yes | z-library account email. | ||
| password | Yes | z-library account password. Never echoed back, logged, or written to disk. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does so well: it discloses that the password is never stored, logged, or returned, that the returned credentials are long-lived, and that the server must be restarted. This goes well beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence earns its place: operation, lifecycle context, security disclosure, and anti-misuse warning. It is front-loaded with the core purpose and avoids redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema and no annotations, the description explains what the call returns, how to use the returned values, and the one-time nature of the operation. For a two-parameter setup tool, this is complete and actionable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents both parameters fully, so the baseline is 3. The description clarifies the overall purpose of email/password and the long-lived credentials, but adds no additional format or constraint semantics for the parameters themselves.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action and resource: 'Exchange a z-library email + password for the long-lived remix credentials (remix_id / remix_key).' It clearly distinguishes itself from the sibling search/download/limit tools by positioning as a one-time setup helper rather than a per-call operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says when to use ('one-time setup helper'), when not to ('not a per-call login', 'Do not call this before every search'), and what to do after calling (configure ZLIB_REMIX_ID/ZLIB_REMIX_KEY and restart). This gives an agent a clear decision boundary.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
zlib_searchSearch z-libraryA
Search z-library for books. Returns a trimmed list — each entry carries the "id" and "hash" that zlib_get_download_url and zlib_download require, plus title/author/year/language/extension/size. Present the candidates to the user and let them pick before downloading anything.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number, starting at 1. Default 1. | |
| limit | No | Results per page, 1-50, default 10. | |
| order | No | Upstream sort field, passed through as-is (e.g. "popular", "year"). | |
| query | Yes | Search keywords: book title, author name, or ISBN. Non-Latin scripts are supported — pass a Chinese title verbatim, do not transliterate or translate it. | |
| year_to | No | Latest publication year (inclusive). | |
| languages | No | Filter by language, e.g. ["english","chinese"]. Omit to accept any language. | |
| year_from | No | Earliest publication year (inclusive). | |
| extensions | No | Filter by file format, e.g. ["epub","pdf"]. Omit to accept any format. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and it does well: it says the result is a trimmed list, enumerates the fields each entry carries, and instructs not to download without user selection, implying a safe read-only search step. It does not mention pagination totals, error behavior, or auth requirements, which keeps it just below a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no waste: the first states the core action, the second adds the output shape and the required user-interaction step. It is front-loaded and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 8 parameters with full schema coverage and no output schema, the description compensates by explaining what the return entries contain and how they feed downstream tools. It is sufficient for correct invocation, though a note on pagination/total result behavior would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents every parameter clearly. The description adds no extra parameter-level detail beyond the output relationship, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Search z-library for books') and the resource ('z-library'), and distinguishes the tool from siblings by explaining it returns a candidate list with the id/hash that zlib_get_download_url and zlib_download require. This makes the tool's role in the download workflow immediately clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly tells the agent to present candidates to the user and let them pick before downloading anything, which defines when this tool should be used relative to the download siblings. It also names the downstream tools that consume its output, giving clear workflow placement.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v0.1.2- First observed
zlib_get_download_url - First observed
zlib_limits - First observed
zlib_login - First observed
zlib_search
TDQS
Scored across 4 tools
Each tool has a distinct purpose: search for books, fetch download URLs, check account limits, and handle login. No two tools overlap in functionality, making selection unambiguous.
All tools share the 'zlib_' prefix and most follow a verb-based pattern (search, get_download_url, login), but 'limits' is a noun rather than a verb like 'get_limits' or 'check_limits'. Minor deviation but still coherent.
With 4 tools covering search, URL generation, quota checking, and authentication, the set is well-scoped for a focused book download workflow. No redundant tools, and each one earns its place.
The descriptions repeatedly mention a 'zlib_download' tool and instructions for enabling it, but that tool is not included in the provided set. This leaves a critical gap in the core workflow, preventing actual file downloads.
Maintenance
Related MCP Connectors
An MCP server that gives your AI access to the source code and docs of all public github repos
Driflyte MCP server which lets AI assistants query topic-specific knowledge from web and GitHub.
Hosted MCP server connecting claude.ai, ChatGPT and other AI apps to your own computer
Official MCP server for Agentwork — delegate tasks to AI agents with human-in-the-loop
Related MCP Servers
- AlicenseAqualityCmaintenanceAn MCP server for searching and downloading books from Library Genesis, supporting EPUB, MOBI, PDF, and more through natural language queries.314 npm7MIT
- FlicenseNot gradedqualityDmaintenanceMCP server that gives AI agents access to the world's public domain library. Search, read, and navigate books and audiobooks from Project Gutenberg and LibriVox.-
- AlicenseAqualityDmaintenanceMCP server that lets AI agents search YouTube and fetch transcripts.23MIT
- AlicenseNot gradedqualityFmaintenanceMCP server for AI assistants to search and download ebooks from Z-Library and Anna's Archive, configured locally with automatic setup and download path.4AGPL 3.0