MCP.Market

Openapi Dynamic MCP server

by mayorandrew·io.github.mayorandrew/openapi-dynamic·v0.3.3·1 stars

Load OpenAPI 2.x/3.x specs and expose generic tools to discover and call multiple APIs.

B82/100grade B
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed Openapi Dynamic yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Openapi Dynamic tools (6, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • auth

    Authenticate one API security scheme and persist its token to the auth store.

  • get_api_endpoint

    Get details for one endpoint in a specific API.

  • get_api_schema

    Get the full dereferenced API schema or a JSON pointer fragment.

  • list_api_endpoints

    List endpoints from a specific API with optional filters.

  • list_apis

    List configured APIs loaded from the YAML configuration.

  • make_endpoint_requestwrite action

    Execute an HTTP request for an endpoint by endpointId.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan55 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 166 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Openapi Dynamic compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
82/100
higher than 63% of 48,255 servers
Tools
6
the typical server has 7
Tools that change things
17%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 28,688 servers

What its tools let an agent do: 5 read · 1 create

Install Openapi Dynamic in Claude Code, Cursor or VS Code

Runs npx -y openapi-dynamic-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add openapi-dynamic -- npx -y openapi-dynamic-mcp
Add to Cursor

What the publisher says

From the Openapi Dynamic repository's README, as published. We do not edit it. Read it on GitHub

openapi-dynamic-mcp

Connect AI clients to OpenAPI APIs quickly, with one MCP server, direct CLI access, and built-in auth support.

Table of Contents

  • Overview
  • Highlights
  • Requirements
  • Quick Start
  • Configuration
  • Client Setup
  • CLI
  • Authentication
  • Environment Variables
  • Working with Responses
  • Files and Binary Data
  • MCP Tools

Overview

openapi-dynamic-mcp lets MCP clients and shell users work with OpenAPI APIs without writing custom glue code for each service. Point it at one or more OpenAPI specs, then list APIs, inspect endpoints, authenticate, and make requests through a consistent interface.

It is designed for common user workflows:

  • Connect multiple APIs through one MCP server
  • Use local specs or hosted specUrl definitions
  • Work with OpenAPI 3.0, 3.1, and Swagger 2.0
  • Handle API key, bearer, basic, and OAuth2 auth
  • Reuse stored tokens across sessions
  • Filter large responses down to the fields you need
  • Preview requests safely before sending them

Highlights

  • Get from spec to usable tools fast: start from a YAML config and immediately browse endpoints or call them from MCP or the CLI.
  • Authenticate the way your API expects: supports API keys, bearer/basic auth, and OAuth2 client credentials, password, device code, and auth code with PKCE.
  • Avoid repeated sign-in work: store tokens once and reuse them later.
  • Handle interactive OAuth cleanly: device-code and browser-based auth return instructions an agent can present to the user.
  • Keep responses focused: project large outputs with JSONPath selectors.
  • Inspect before you send: use dry runs to preview request shape without network I/O.
  • Upload files when needed: supports multipart form uploads and raw binary bodies.
  • Stay resilient against rate limits: configurable retries for 429 Too Many Requests.

Requirements

  • Node.js 20+

Quick Start

Run the MCP server directly:

npx -y openapi-dynamic-mcp@latest --config ./config.yaml

Minimal config:

version: 1
apis:
  - name: pet-api
    specPath: ./pet-api.yaml

You can also point at a remote spec:

version: 1
apis:
  - name: pet-api
    specUrl: https://api.example.com/openapi.json

Configuration

Add each API you want to use under apis. Each entry can point to a local spec file or a remote spec URL.

version: 1

apis:
  - name: pet-api
    specPath: ./pet-api.yaml
    # specUrl: https://api.example.com/openapi.yaml
    baseUrl: https://api.example.com/v1
    timeoutMs: 30000
    headers:
      X-Client: openapi-dynamic-mcp
    retry429:
      maxRetries: 2
      baseDelayMs: 250
      maxDelayMs: 5000
      jitterRatio: 0.2
      respectRetryAfter: true
    oauth2Schemes:
      OAuthCC:
        tokenUrl: https://auth.example.com/oauth2/token
        scopes: [read:pets, write:pets]
        tokenEndpointAuthMethod: client_secret_basic
      UserAuth:
        authMethod: device_code
        deviceAuthorizationEndpoint: https://auth.example.com/oauth/device
        pkce: true

Common options:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Openapi Dynamic: common questions

Is Openapi Dynamic MCP server safe?
Mostly: it is graded B (82/100). Read the Openapi Dynamic safety report
How do I install Openapi Dynamic?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Openapi Dynamic need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Openapi Dynamic maintained?
The last commit was 204 days ago (2026-04-14). The latest release is v0.3.3.
How does Openapi Dynamic compare with other MCP servers?
safety score 82/100 (higher than 63% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.