napi
Verified Safeby HoweChen
Overview
Provides a Model Context Protocol (MCP) server to allow AI assistants to query API documentation stored in the NAPI database.
Installation
bunx napi-mcpEnvironment Variables
- NEXT_PUBLIC_BASE_PATH
- DATABASE_TYPE
- POSTGRES_HOST
- POSTGRES_PORT
- POSTGRES_USER
- POSTGRES_PASSWORD
- POSTGRES_DATABASE
- POSTGRES_URL
- MYSQL_HOST
- MYSQL_PORT
- MYSQL_USER
- MYSQL_PASSWORD
- MYSQL_DATABASE
- MYSQL_URL
- SQLITE_PATH
- NAPI_BASE_URL
- NODE_ENV
Security Notes
The server component (mcp-server) acts as a proxy to the Next.js API endpoint (/api/mcp-tools). While the API endpoint uses a switch statement to restrict tool names, the arguments (`args`) passed to these tools are not explicitly validated against Zod schemas within the route handler itself. Drizzle ORM is used for database interactions, which generally protects against SQL injection through parameterized queries. No hardcoded secrets or 'eval' calls were found. The older file-based API functionality is not exposed to the MCP server. Overall, the system is reasonably secure due to modern framework and ORM practices, but explicit input validation on `args` at the API boundary would enhance robustness.
Similar Servers
nextcloud-mcp-server
Transforms a Nextcloud instance into a semantic intelligence engine, providing AI agents and semantic search capabilities.
toolhive-cloud-ui
A UI for interacting with AI models via OpenRouter and managing/utilizing MCP (Model Context Protocol) servers and their tools from a centralized catalog.
openapi-mcp-server
Converts OpenAPI specifications into Model Context Protocol (MCP) tools, enabling AI assistants to interact with APIs.
doc-bot
An intelligent MCP (Model Context Protocol) server that enhances AI coding assistants by providing smart documentation management and API references for deep project understanding.