MCP.Market

Openapi MCP server

by Asthanaji05·io.github.Asthanaji05/openapi-mcp·v0.1.1

Turn any OpenAPI 3 spec into a working MCP server. One file, local (stdio) or remote (HTTP).

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

0 stars181 downloads/wk

Reviews

Write one

Nobody has reviewed Openapi yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Openapi tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-12 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Openapi compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 95% of 48,255 servers
Downloads a week
181
more than 74% of 12,191 servers with a package

Install Openapi in Claude Code, Cursor or VS Code

Runs npx -y @asthanaji/openapi-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add openapi-mcp -- npx -y @asthanaji/openapi-mcp
Add to Cursor

What the publisher says

From the Openapi repository's README, as published. We do not edit it. Read it on GitHub

# OpenAPI MCP

Turn any OpenAPI 3 spec into a working MCP server. One file, about 130 lines, no dependencies.

node openapi-mcp.mjs https://your-api.com/openapi.json

Every API endpoint becomes a tool that an AI client (Claude, Cursor, etc.) can call. There is no code generation and no per-endpoint files. The spec is read at startup, and the tools are built in memory.

Quick start

Requires Node 18 or newer.

git clone <this-repo>
cd openapi-mcp
node openapi-mcp.mjs sample/animechan.openapi.json

It prints openapi-mcp: 4 tools from "Animechan" -> ... and then waits silently for an MCP client. That is normal: it talks JSON-RPC over stdin/stdout and is not meant to be read by humans.

Use it with an AI client

Claude Desktop (local mode)

Add this to ~/Library/Application Support/Claude/claudedesktopconfig.json, then restart the app:

{
  "mcpServers": {
    "animechan": {
      "command": "node",
      "args": ["/full/path/openapi-mcp.mjs", "/full/path/animechan.openapi.json"]
    }
  }
}

If the client can't find node, use the full path from which node.

Claude Code (remote mode)

Start the server, then register it:

MCP_AUTH_TOKEN=secret node openapi-mcp.mjs sample/animechan.openapi.json --http 8787

claude mcp add --transport http animechan http://localhost:8787/mcp \
  --header "Authorization: Bearer secret"

Then ask in plain English: "give me a random quote from Naruto".

Two modes

In HTTP mode, clients send JSON-RPC messages as POST http://host:/mcp. Put --http last.

Test it by hand:

curl -X POST localhost:8787/mcp -H 'Authorization: Bearer secret' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Options

node openapi-mcp.mjs <spec-url-or-file> [base-url] [--http <port>]

Big APIs can have hundreds of endpoints. Too many tools makes the model choose worse, so use TOOL_FILTER to keep the useful ones.

Authentication

The server reads securitySchemes from the spec and puts your secret in the right place. You only supply the secret as an environment variable:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Openapi: common questions

Is Openapi MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Openapi safety report
How do I install Openapi?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Openapi need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Openapi maintained?
The last commit was 23 days ago (2026-10-12). The latest release is v0.1.1.
How does Openapi compare with other MCP servers?
safety score 92/100 (higher than 95% of 48,255 servers); downloads a week 181 (more than 74% of 12,191 servers with a package). Full comparison.