Openapi Scout MCP server

by mrfentmen·io.github.mrfentmen/openapi-scout-mcp·v1.0.0

Local read-only OpenAPI and Swagger inspection with secret-safe schema summaries. Tools include...

A85/100grade A

What users say

No reviews yet

Safety scan

A85/100

Adoption

New

0 stars

Reviews

Nobody has reviewed Openapi Scout yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

find_operation
Find one operation by operationId in a local OpenAPI or Swagger JSON file.
inspect_spec
Summarize a local OpenAPI or Swagger JSON file, including operations and servers, while redacting examples, defaults, and credential-like data.
list_schemas
List local OpenAPI component schemas or Swagger definitions with sensitive example values redacted.

scanner v0.1.9 · 2026-09-22 · same rubric, same numbers if you re-run it

no findings

Code scan8 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 44 days ago12/15
Maintainer identityregistry namespace matches repository owner6/10

Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y openapi-scout-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add openapi-scout-mcp -- npx -y openapi-scout-mcp

Is Openapi Scout MCP server safe?: Yes, by our scan: it is graded A (85/100). Read the Openapi Scout safety report
How do I install Openapi Scout?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Openapi Scout need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Openapi Scout maintained?: The last commit was 45 days ago (2026-08-08). The latest release is v1.0.0.
What can I use instead of Openapi Scout?: Servers from other publishers that do the same job: Debezium MCP server, Connection String Secret Audit MCP server and Baserow Schema MCP server. Compare all Openapi Scout alternatives.

Same job from other publishers: the closest match first, then the best rated.

Debezium
Debezium / Kafka Connect CDC connector management for AI agents — governed, secret-safe.
not reviewed
Growing
A
Connection String Secret Audit
26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs acr
More from jmshinhwa →
not reviewed
Growing
A
Baserow Schema MCP
Generic Baserow API client MCP server with automatic 2FA (TOTP) auth and OpenAPI validation.
not reviewed
Growing
B
MCP
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
not reviewed
Growing
A
Ticket Demo
MCP server demo — tickets, schema discovery, auth, and PII gating. stdio + HTTP.
not reviewed
Growing
B