Openapi MCP server
io.github.Asthanaji05/openapi-mcp·v0.1.1Turn any OpenAPI 3 spec into a working MCP server. One file, local (stdio) or remote (HTTP).
0 stars181 downloads/wk
Reviews
Write oneNobody has reviewed Openapi yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Openapi tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-12 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Openapi compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 95% of 48,255 servers
- Downloads a week
- 181
- more than 74% of 12,191 servers with a package
Install Openapi in Claude Code, Cursor or VS Code
Runs npx -y @asthanaji/openapi-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add openapi-mcp -- npx -y @asthanaji/openapi-mcp
What the publisher says
From the Openapi repository's README, as published. We do not edit it. Read it on GitHub
# OpenAPI MCP
Turn any OpenAPI 3 spec into a working MCP server. One file, about 130 lines, no dependencies.
node openapi-mcp.mjs https://your-api.com/openapi.jsonEvery API endpoint becomes a tool that an AI client (Claude, Cursor, etc.) can call. There is no code generation and no per-endpoint files. The spec is read at startup, and the tools are built in memory.
Quick start
Requires Node 18 or newer.
git clone <this-repo>
cd openapi-mcp
node openapi-mcp.mjs sample/animechan.openapi.jsonIt prints openapi-mcp: 4 tools from "Animechan" -> ... and then waits silently for an MCP client. That is normal: it talks JSON-RPC over stdin/stdout and is not meant to be read by humans.
Use it with an AI client
Claude Desktop (local mode)
Add this to ~/Library/Application Support/Claude/claudedesktopconfig.json, then restart the app:
{
"mcpServers": {
"animechan": {
"command": "node",
"args": ["/full/path/openapi-mcp.mjs", "/full/path/animechan.openapi.json"]
}
}
}If the client can't find node, use the full path from which node.
Claude Code (remote mode)
Start the server, then register it:
MCP_AUTH_TOKEN=secret node openapi-mcp.mjs sample/animechan.openapi.json --http 8787
claude mcp add --transport http animechan http://localhost:8787/mcp \
--header "Authorization: Bearer secret"Then ask in plain English: "give me a random quote from Naruto".
Two modes
In HTTP mode, clients send JSON-RPC messages as POST http://host:/mcp. Put --http last.
Test it by hand:
curl -X POST localhost:8787/mcp -H 'Authorization: Bearer secret' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'Options
node openapi-mcp.mjs <spec-url-or-file> [base-url] [--http <port>]Big APIs can have hundreds of endpoints. Too many tools makes the model choose worse, so use TOOL_FILTER to keep the useful ones.
Authentication
The server reads securitySchemes from the spec and puts your secret in the right place. You only supply the secret as an environment variable:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Openapi: common questions
- Is Openapi MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Openapi safety report
- How do I install Openapi?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Openapi need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Openapi maintained?
- The last commit was 23 days ago (2026-10-12). The latest release is v0.1.1.
- How does Openapi compare with other MCP servers?
- safety score 92/100 (higher than 95% of 48,255 servers); downloads a week 181 (more than 74% of 12,191 servers with a package). Full comparison.