OpenAPI Lint MCP server
Lint OpenAPI 3.x documents for missing security, responses, descriptions and versioning.
not scanned yet
1 stars
Reviews
Write oneNobody has reviewed OpenAPI Lint yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
OpenAPI Lint tools
No tool declarations could be read from the package source. They show once the server is installed.
How OpenAPI Lint compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 85% of 915 Security servers
- GitHub stars
- 1
- more than 60% of 587 Security servers
Release history: 4 versions in the registry since 2026-10-09, latest 2026-10-28, typically one every 5 days.
Install OpenAPI Lint in Claude Code, Cursor or VS Code
claude mcp add mcp-openapi-lint -- docker run -i --rm ghcr.io/basitalisandhu/mcp-openapi-lint:0.3.0
What the publisher says
From the OpenAPI Lint repository's README, as published. We do not edit it. Read it on GitHub
dev-mcp-servers
Ten small MCP servers for everyday development and security checks. Each one is a separate npm package you add to Claude Code, Claude Desktop, Cursor or any other MCP client with one line, and each does one job well: look up vulnerabilities, grade security headers, decode a JWT, test a regex, explain a cron expression, validate JSON against a schema, lint an OpenAPI document or a Dockerfile, read statistics out of a git repository, or build an llms.txt.
All servers are TypeScript on the official @modelcontextprotocol/sdk, speak stdio only, validate every input with zod, bound their inputs and run time, send no telemetry, and ship with node:test suites that cover every tool.
Servers
Every package README lists its tools with inputs and outputs, the exact claude mcp add command, a .mcp.json snippet, and what the server touches on disk and on the network.
Quick start
With Claude Code:
claude mcp add jwt-tools -- npx -y @basitalisandhu/mcp-jwt-tools@0.2.0
claude mcp listAdd -s user to install for every project rather than the current one. For clients that read .mcp.json (Claude Code, Claude Desktop, Cursor), add an entry per server:
{
"mcpServers": {
"jwt-tools": { "command": "npx", "args": ["-y", "@basitalisandhu/mcp-jwt-tools@0.2.0"] },
"osv-advisories": { "command": "npx", "args": ["-y", "@basitalisandhu/mcp-osv-advisories@0.2.0"] }
}
}Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
OpenAPI Lint: common questions
- Is OpenAPI Lint MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the OpenAPI Lint safety report
- How do I install OpenAPI Lint?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does OpenAPI Lint need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is OpenAPI Lint maintained?
- The last commit was 26 days ago (2026-10-09). The latest release is v0.3.0.
- What can I use instead of OpenAPI Lint?
- Servers from other publishers that do the same job: Security Txt Cra Lint MCP server, Skylos MCP server and Snyk MCP server.
- How does OpenAPI Lint compare with other Security MCP servers?
- safety score 88/100 (higher than 85% of 915 Security servers); github stars 1 (more than 60% of 587 Security servers). Full comparison.
Alternatives to OpenAPI Lint
Same job from other publishers: the closest match first, then the best rated.
- Security Txt Cra Lint13 rules that decide whether a vulnerability report ever reaches younot reviewedGrowingA
- SkylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.not reviewedEstablishedC
- SnykEasily find and fix security issues in your applications leveraging Snyk platform capabilities.not reviewedEstablishedB
- CrowdStrike Falcon MCP ServerConnects AI agents with CrowdStrike Falcon for security analysis and automation.not reviewedEstablishedA
- WiresharkProfessional network analysis with tshark. Security audits, deep-dives, and threat detection.not reviewedEstablishedA