MCP.Market

OpenAPI Services MCP server

by alyiox·io.github.alyiox/mcp-openapix·v0.2.1

MCP server that fronts any OpenAPI service: discover operations from its spec and call them

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

0 stars71 downloads/wk

Reviews

Write one

Nobody has reviewed OpenAPI Services yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

OpenAPI Services tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • call_endpoint
  • describe_endpoint

    [OpenAPI] Get the full OpenAPI schema for one operation.

  • list_endpoints
  • list_platforms

Public scan report

scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it

no findings
  • Code scan18 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 32 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How OpenAPI Services compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 75% of 48,255 servers
Tools
4
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
71
more than 54% of 12,191 servers with a package

What its tools let an agent do: 4 read

Release history: 3 versions in the registry since 2026-09-21, latest 2026-09-30, typically one every 7 days.

Install OpenAPI Services in Claude Code, Cursor or VS Code

claude mcp add mcp-openapix -- uvx mcp-openapix
Add to Cursor

What the publisher says

From the OpenAPI Services repository's README, as published. We do not edit it. Read it on GitHub

mcp-openapix

<!-- mcp-name: io.github.alyiox/mcp-openapix -->

MCP server that fronts any OpenAPI service behind four generic tools.

An agent finds operations in each deployment's OpenAPI document and calls them; the server resolves the URL, obtains a bearer token, and builds the request. Discovery is listplatforms, listendpoints and describeendpoint; execution is the generic proxy callendpoint.

example / us / items / prod
  │     │     │      └── env ......... which deployment URL a call reaches
  │     │     └───────── service ..... one backend, one OpenAPI spec
  │     └─────────────── region ...... a geographic deployment
  └───────────────────── platform .... the product or API family

Requirements

  • Python 3.13+ and uv
  • A config.json describing the deployments you hold credentials for

Quick start

Set up your config (see Configuration), then run the server:

# Run directly with uvx (no clone needed)
npx -y @modelcontextprotocol/inspector@latest uvx mcp-openapix
# Or run from source
npx -y @modelcontextprotocol/inspector@latest uv run mcp-openapix

Configuration

config.json MUST live at ~/.config/mcp-openapix/config.json (%USERPROFILE%\.config\… on Windows). config.example.json is a full template.

{
  "headers": { "accept": "application/json" },
  "defaults": { "platform": "example", "region": "us", "service": "items", "env": "prod" },
  "platforms": {
    "example": {
      "regions": {
        "us": {
          "services": {
            "token_helper": "us",
            "items": {
              "desc": "Catalogue and inventory API",
              "spec_path": "/swagger/v1/swagger.json",
              "canonical_env": "prod",
              "envs": {
                "prod": { "url": "https://api.example.com/items" },
                "dev":  { "url": "https://api-dev.example.com/items" }
              }
            }
          }
        }
      }
    }
  },
  "token_helpers": {
    "us": {
      "command": "token-helper",
      "args": ["issue"]
    }
  }
}

platforms

A hierarchy of platform → region → services → service → env. Each service declares:

The services object may also contain a token_helper default applying to all services in that region. A service or environment can override it.

token_helpers

Named token helpers, in the same shape as an MCP server entry:

The config names a command and nothing else, so config.json holds no secrets. The complete helper invocation and output contract is documented in docs/token-protocol.md.

Which helper a call uses is resolved most-specific-first:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

OpenAPI Services: common questions

Is OpenAPI Services MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the OpenAPI Services safety report
How do I install OpenAPI Services?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does OpenAPI Services need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is OpenAPI Services maintained?
The last commit was 35 days ago (2026-09-30). The latest release is v0.2.1.
How does OpenAPI Services compare with other MCP servers?
safety score 88/100 (higher than 75% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from alyiox →