Mockzilla MCP server
io.github.mockzilla/mockzilla-mcp·v0.2.28·5 starsMock OpenAPI specs locally, or log in to deploy hosted mocks on mockzilla.org from your MCP client.
5 stars322 downloads/wk
Reviews
Write oneNobody has reviewed Mockzilla yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Mockzilla tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
- Code scan16 source files scanned13/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 6 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- highShell command built from a string (injection risk)
exec.shell-concatlib/github.js: …tion hasWorkflow(repo) { return await exec( `gh api ${shellEscape(`repos/${repo}/contents/${WO…
How Mockzilla compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 63/100
- higher than 17% of 1,119 Developer tools servers
- GitHub stars
- 5
- more than 78% of 855 Developer tools servers
- Downloads a week
- 322
- more than 78% of 436 Developer tools servers with a package
Release history: 4 versions in the registry since 2026-09-17, latest 2026-10-09, typically one every 7 days.
Install Mockzilla in Claude Code, Cursor or VS Code
Runs npx -y @mockzilla/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mockzilla-mcp -- npx -y @mockzilla/mcp
What the publisher says
From the Mockzilla repository's README, as published. We do not edit it. Read it on GitHub
@mockzilla/mcp
MCP server for Mockzilla - an open-source API mock server for OpenAPI specifications. Let Claude Code, Claude Desktop, Cursor, or Gemini CLI install Mockzilla, inspect OpenAPI specs, and spin up realistic local mock APIs in seconds. No account required for local use.
Source: github.com/mockzilla/mockzilla-mcp
Use cases
- Local API development - mock any OpenAPI spec without a real backend or sandbox account
- CI/CD integration testing - zero external dependencies in your pipeline
- PSP and payment API mocking - Stripe, PayPal, Adyen from your editor without test accounts
- Crypto exchange API mocking - Binance, Bybit without registered accounts
- Rate limit protection - develop against OpenAI, Twilio without burning quota
- Agentic workflows - let Claude or Cursor spin up and manage mock servers automatically
Two planes
@mockzilla/mcp exposes two planes of tools to your MCP client.
Local plane (no account required)
Runs on your machine. No Mockzilla account needed.
From an agent you can:
- Check whether the Mockzilla CLI is installed, and install it into a managed cache (no changes to system PATH).
- Inspect and lint an OpenAPI spec, or scan a folder for specs.
- Simplify a spec that is too heavy to mock, or pack services into a .mockz archive.
- Serve any OpenAPI spec locally as a portable mock server, and call its endpoints.
- Mock a single HTTP endpoint without a spec.
- List, stop, and clear locally managed mocks.
Hosted plane (log in once)
Ask your agent to log in, or ask for something hosted. The agent calls the login tool, your browser opens the Mockzilla login, and you pick an organization and read-only or read-and-write access. The bridge keeps the login on your machine and renews it by itself. Hosted tools are listed from the start; before you log in, the agent is told to log in first.
Agents can then:
- List deployed sims.
- Browse catalog products.
- Deploy hosted mocks from a spec, URL, or catalog bundle.
- Wait for a deploy and return the live URL.
Before logging in, only the local plane is exposed. Agents can still help users explore Mockzilla and run local mocks before they sign up.
Example prompts
You can use these directly from Claude Code, Claude Desktop, Cursor, or Gemini CLI once mockzilla is configured as an MCP server.
Local plane (no account)
- "Is the mockzilla CLI installed on this machine?"
- "Install Mockzilla for me."
- "Spin up the Petstore OpenAPI spec locally so I can curl it."
- "What endpoints does https://example.com/openapi.yaml expose?"
- "Mock POST /checkout to return a 402 response."
- "List the mock endpoints you're managing."
- "Stop the mock server you started."
Hosted plane (after logging in)
- "Log me in to Mockzilla."
- "List the sims I have deployed."
- "Show me the catalog products."
- "Deploy a Stripe mock named stripe-test and give me the live URL."
- "Create a hosted mock from this OpenAPI URL on mockzilla.org."
Install
Claude Code
One-liner, no config file editing:
claude mcp add -s user mockzilla -- npx -y @mockzilla/mcp@latest- -s user installs for your user account (available in every project).
- Drop -s user to scope to the current project only.
Claude Desktop
Edit ~/Library/Application Support/Claude/claudedesktopconfig.json:
{
"mcpServers": {
"mockzilla": {
"command": "npx",
"args": ["-y", "@mockzilla/mcp@latest"]
}
}
}Restart Claude Desktop after editing.
Cursor
Easiest: Settings -> MCP Servers -> Add new MCP server and fill in:
- Name: mockzilla
- Command: npx
- Args: -y @mockzilla/mcp@latest
Or edit ~/.cursor/mcp.json directly:
{
"mcpServers": {
"mockzilla": {
"command": "npx",
"args": ["-y", "@mockzilla/mcp@latest"]
}
}
}Restart Cursor after editing.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-09-19restoreD → Cscore 63: Shell command built from a string (injection risk)
Mockzilla: common questions
- Is Mockzilla MCP server safe?
- With care: it is graded C, so read the findings first (63/100). Read the Mockzilla safety report
- How do I install Mockzilla?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Mockzilla need an API key?
- Yes. The registry entry asks for
MOCKZILLA_TOKEN. - Is Mockzilla maintained?
- The last commit was 25 days ago (2026-10-09). The latest release is v0.2.28.
- What can I use instead of Mockzilla?
- Servers from other publishers that do the same job: clawops MCP server, walkerOS Flow MCP server and Omnara MCP server.
- How does Mockzilla compare with other Developer tools MCP servers?
- safety score 63/100 (higher than 17% of 1,119 Developer tools servers); github stars 5 (more than 78% of 855 Developer tools servers); downloads a week 322 (more than 78% of 436 Developer tools servers with a package). Full comparison.
Alternatives to Mockzilla
Same job from other publishers: the closest match first, then the best rated.
- clawopsDeploy self-hosted OpenClaw to AWS, GCP, Azure or a local VM — a CLI and an MCP server in one.not reviewedGrowingC
walkerOS FlowBuild, validate, simulate, and deploy walkerOS event pipelinesnot reviewedEstablishedB- OmnaraDeploy durable AI agents with Omnara, an open-source managed-agent platform.not reviewedEstablishedA
- Metaplex Agent RegistryDeploy AI agents on-chain on Solana with an EIP-8004 identity. Deploy fee funds $THREE buybacks.not reviewedEstablishedB
Aiven MCPProvision PostgreSQL, manage Apache Kafka, and deploy apps with Aiven - all from your AI assistant.not reviewedEstablishedA