X Openapi Flow MCP server
io.github.tiago-marques/x-openapi-flow-mcp·v1.7.4·5 starsOpenAPI lifecycle guard and MCP sidecar for policy-driven API orchestration.
5 stars80 downloads/wk
Reviews
Write oneNobody has reviewed X Openapi Flow yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
X Openapi Flow tools (6, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
analyzeAnalyze a base OpenAPI file and infer a suggested sidecar (.x.yaml) with lifecycle states and transitions.
diffCompute the lifecycle diff between a base OpenAPI file and a sidecar file (.x.yaml/json).
graphGenerate a Mermaid stateDiagram-v2 diagram of the lifecycle state machine from an OpenAPI flow file.
lintwrite actionRun structural lint rules on an OpenAPI flow file.
quality_reportwrite actionRun the lifecycle quality report on an OpenAPI flow file.
validateValidate an OpenAPI flow file against the x-openapi-flow schema and lifecycle rules.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan27 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 12 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How X Openapi Flow compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 95% of 48,255 servers
- Tools
- 6
- the typical server has 7
- Tools that change things
- 33%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 5
- more than 83% of 28,688 servers
- Downloads a week
- 80
- more than 57% of 12,191 servers with a package
What its tools let an agent do: 4 read · 2 change
Install X Openapi Flow in Claude Code, Cursor or VS Code
Runs npx -y x-openapi-flow on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add x-openapi-flow-mcp -- npx -y x-openapi-flow
What the publisher says
From the X Openapi Flow repository's README, as published. We do not edit it. Read it on GitHub
OpenAPI describes APIs. x-openapi-flow turns them into executable workflows — for developers and AI agents.
Define your API workflows in openapi.x.json and execute them without writing custom clients or orchestration logic
🚀 2,100+ downloads in the first 3 weeks!
⚡ Get started in seconds
npx x-openapi-flow init --suggest-transitionsThis generates an openapi.x.json file where you can declaratively define how your API should be executed — not just described.
See your API lifecycle come alive from your OpenAPI spec, with one simple command
Validate, document, and generate flow-aware SDKs automatically.
What is this?
x-openapi-flow extends your OpenAPI specification with a workflow layer.
openapi.json → describes your API
openapi.x.json → describes how to use it (flows)
Instead of writing imperative code to orchestrate API calls, you define workflows declaratively and run them anywhere.
x-openapi-flow adds a declarative state machine to your OpenAPI spec.
Model resource lifecycles, enforce valid transitions, and generate flow-aware artifacts for documentation, SDKs, and automation.
🚀 Example
Define stateful workflows and lifecycle transitions directly inside your OpenAPI operations:
{
"operationId": "createOrder",
"x-openapi-flow": {
"version": "1.0",
"id": "create-order",
"current_state": "created",
"description": "Creates an order and starts the lifecycle",
"transitions": [
{
"transition_id": "order-created-to-paid",
"trigger_type": "synchronous",
"condition": "Payment is confirmed",
"decision_rule": "payOrder:response.200.body.payment_status == 'approved'",
"target_state": "paid",
"next_operation_id": "payOrder",
"operation_role": "mutate",
"prerequisite_operation_ids": ["createOrder"],
"evidence_refs": [
"payOrder:response.200.body.payment_status"
],
"propagated_field_refs": [
"createOrder:response.201.body.order_id"
],
"failure_paths": [
{
"reason": "Payment denied",
"target_state": "payment_failed",
"next_operation_id": "getOrder"
}
]
}
]
}
}This flow defines an order lifecycle directly inside your OpenAPI:
- Starts in the created state
- Transitions to paid when payment is confirmed
- Supports both synchronous and polling-based transitions
- Propagates data between operations automatically
- Can include explicit decision/evidence and failure-path metadata for AI-guided orchestration
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
X Openapi Flow: common questions
- Is X Openapi Flow MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the X Openapi Flow safety report
- How do I install X Openapi Flow?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does X Openapi Flow need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is X Openapi Flow maintained?
- The last commit was 50 days ago (2026-09-15). The latest release is v1.7.4.
- What can I use instead of X Openapi Flow?
- Servers from other publishers that do the same job: Claude Flow MCP server.
- How does X Openapi Flow compare with other MCP servers?
- safety score 92/100 (higher than 95% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to X Openapi Flow
Same job from other publishers: the closest match first, then the best rated.
- Claude FlowAI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.not reviewedEstablishedB