Back to Home
ivo-toby icon

mcp-openapi-server

Verified Safe

by ivo-toby

Overview

Exposes OpenAPI endpoints as Model Context Protocol (MCP) tools, enabling Large Language Models (LLMs) to discover and interact with REST APIs through a standardized protocol.

Installation

Run Command
npx @ivotoby/openapi-mcp-server --api-base-url <YOUR_API_BASE_URL> --openapi-spec <YOUR_OPENAPI_SPEC_URL_OR_PATH>

Environment Variables

  • API_BASE_URL
  • OPENAPI_SPEC_PATH
  • OPENAPI_SPEC_FROM_STDIN
  • OPENAPI_SPEC_INLINE
  • API_HEADERS
  • SERVER_NAME
  • SERVER_VERSION
  • TRANSPORT_TYPE
  • HTTP_PORT
  • HTTP_HOST
  • ENDPOINT_PATH
  • TOOLS_MODE
  • DISABLE_ABBREVIATION

Security Notes

The server includes origin validation for HTTP transport and has a configurable maximum request body size (4MB). It utilizes an `AuthProvider` interface for dynamic authentication, reducing reliance on potentially expired hardcoded tokens. Placeholder tokens in examples are clearly marked. No `eval` or obvious malicious patterns were found. Users must responsibly manage API keys and tokens (e.g., via environment variables or a custom AuthProvider) to avoid hardcoding secrets in production.

Similar Servers

Stats

Interest Score59
Security Score9
Cost ClassMedium
Avg Tokens1000
Stars205
Forks44
Last Update2025-12-03

Tags

OpenAPIMCPAPILLMAuthenticationServerRESTTypeScriptTooling