Openapi Dynamic MCP server
io.github.mayorandrew/openapi-dynamic·v0.3.3·1 starsLoad OpenAPI 2.x/3.x specs and expose generic tools to discover and call multiple APIs.
1 stars
Reviews
Write oneNobody has reviewed Openapi Dynamic yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Openapi Dynamic tools (6, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
authAuthenticate one API security scheme and persist its token to the auth store.
get_api_endpointGet details for one endpoint in a specific API.
get_api_schemaGet the full dereferenced API schema or a JSON pointer fragment.
list_api_endpointsList endpoints from a specific API with optional filters.
list_apisList configured APIs loaded from the YAML configuration.
make_endpoint_requestwrite actionExecute an HTTP request for an endpoint by endpointId.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan55 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 166 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Openapi Dynamic compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,255 servers
- Tools
- 6
- the typical server has 7
- Tools that change things
- 17%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 28,688 servers
What its tools let an agent do: 5 read · 1 create
Install Openapi Dynamic in Claude Code, Cursor or VS Code
Runs npx -y openapi-dynamic-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add openapi-dynamic -- npx -y openapi-dynamic-mcp
What the publisher says
From the Openapi Dynamic repository's README, as published. We do not edit it. Read it on GitHub
openapi-dynamic-mcp
Connect AI clients to OpenAPI APIs quickly, with one MCP server, direct CLI access, and built-in auth support.
Table of Contents
- Overview
- Highlights
- Requirements
- Quick Start
- Configuration
- Client Setup
- CLI
- Authentication
- Environment Variables
- Working with Responses
- Files and Binary Data
- MCP Tools
Overview
openapi-dynamic-mcp lets MCP clients and shell users work with OpenAPI APIs without writing custom glue code for each service. Point it at one or more OpenAPI specs, then list APIs, inspect endpoints, authenticate, and make requests through a consistent interface.
It is designed for common user workflows:
- Connect multiple APIs through one MCP server
- Use local specs or hosted specUrl definitions
- Work with OpenAPI 3.0, 3.1, and Swagger 2.0
- Handle API key, bearer, basic, and OAuth2 auth
- Reuse stored tokens across sessions
- Filter large responses down to the fields you need
- Preview requests safely before sending them
Highlights
- Get from spec to usable tools fast: start from a YAML config and immediately browse endpoints or call them from MCP or the CLI.
- Authenticate the way your API expects: supports API keys, bearer/basic auth, and OAuth2 client credentials, password, device code, and auth code with PKCE.
- Avoid repeated sign-in work: store tokens once and reuse them later.
- Handle interactive OAuth cleanly: device-code and browser-based auth return instructions an agent can present to the user.
- Keep responses focused: project large outputs with JSONPath selectors.
- Inspect before you send: use dry runs to preview request shape without network I/O.
- Upload files when needed: supports multipart form uploads and raw binary bodies.
- Stay resilient against rate limits: configurable retries for 429 Too Many Requests.
Requirements
- Node.js 20+
Quick Start
Run the MCP server directly:
npx -y openapi-dynamic-mcp@latest --config ./config.yamlMinimal config:
version: 1
apis:
- name: pet-api
specPath: ./pet-api.yamlYou can also point at a remote spec:
version: 1
apis:
- name: pet-api
specUrl: https://api.example.com/openapi.jsonConfiguration
Add each API you want to use under apis. Each entry can point to a local spec file or a remote spec URL.
version: 1
apis:
- name: pet-api
specPath: ./pet-api.yaml
# specUrl: https://api.example.com/openapi.yaml
baseUrl: https://api.example.com/v1
timeoutMs: 30000
headers:
X-Client: openapi-dynamic-mcp
retry429:
maxRetries: 2
baseDelayMs: 250
maxDelayMs: 5000
jitterRatio: 0.2
respectRetryAfter: true
oauth2Schemes:
OAuthCC:
tokenUrl: https://auth.example.com/oauth2/token
scopes: [read:pets, write:pets]
tokenEndpointAuthMethod: client_secret_basic
UserAuth:
authMethod: device_code
deviceAuthorizationEndpoint: https://auth.example.com/oauth/device
pkce: trueCommon options:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Openapi Dynamic: common questions
- Is Openapi Dynamic MCP server safe?
- Mostly: it is graded B (82/100). Read the Openapi Dynamic safety report
- How do I install Openapi Dynamic?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Openapi Dynamic need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Openapi Dynamic maintained?
- The last commit was 204 days ago (2026-04-14). The latest release is v0.3.3.
- How does Openapi Dynamic compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.