napi
Verified Safeby HoweChen
Overview
Provides a Model Context Protocol (MCP) server to allow AI assistants to query API documentation stored in the NAPI database.
Installation
bunx napi-mcpEnvironment Variables
- NEXT_PUBLIC_BASE_PATH
- DATABASE_TYPE
- POSTGRES_HOST
- POSTGRES_PORT
- POSTGRES_USER
- POSTGRES_PASSWORD
- POSTGRES_DATABASE
- POSTGRES_URL
- MYSQL_HOST
- MYSQL_PORT
- MYSQL_USER
- MYSQL_PASSWORD
- MYSQL_DATABASE
- MYSQL_URL
- SQLITE_PATH
- NAPI_BASE_URL
- NODE_ENV
Security Notes
The server component (mcp-server) acts as a proxy to the Next.js API endpoint (/api/mcp-tools). While the API endpoint uses a switch statement to restrict tool names, the arguments (`args`) passed to these tools are not explicitly validated against Zod schemas within the route handler itself. Drizzle ORM is used for database interactions, which generally protects against SQL injection through parameterized queries. No hardcoded secrets or 'eval' calls were found. The older file-based API functionality is not exposed to the MCP server. Overall, the system is reasonably secure due to modern framework and ORM practices, but explicit input validation on `args` at the API boundary would enhance robustness.
Similar Servers
mcp-server
Provides a Model Context Protocol (MCP) server for AI agents to search and retrieve curated documentation for the Strands Agents framework, facilitating AI coding assistance.
nextcloud-mcp-server
The Nextcloud MCP Server connects AI assistants to a Nextcloud instance, enabling natural language interaction for CRUD operations across various Nextcloud apps and supporting retrieval-augmented generation (RAG) for semantic search.
mcp-server-nodejs-api-docs
This MCP Server provides up-to-date Node.js API documentation for built-in core modules to AI agents.
openapi-mcp-server
Dynamically converts OpenAPI specifications into Model Context Protocol (MCP) tools, enabling AI assistants to interact with defined APIs by mapping AI calls to HTTP requests.