
Mcp Api Connect
io.github.bvenkataPublished by GitHub account bvenkatav0.1.0Updated Oct 25, 2026
Protocol- & auth-agnostic API connector: SOAP/REST behind any auth, config-driven. Lib/API/MCP.
Overview
A config-driven connector engine that lets an assistant call REST or SOAP APIs behind various auth schemes through reusable or one-off connector specs.
- What you can do
- Invoke any REST or SOAP service once with an inline spec (URL, protocol, auth, request and response shape). Register, list, invoke by name, and delete reusable named connectors. Handle API key, Basic, Bearer and OAuth2 client-credentials auth, with OAuth2 tokens fetched and cached. Reshape payloads declaratively with field maps or Jinja2 body templates, including SOAP envelopes.
- When to use it
- Useful when an assistant needs to reach several third-party or internal APIs with different protocols and auth flows, and you want to describe each target once as configuration instead of writing a client per service.
- Requirements
- Runs locally over stdio as a Python package installed with the MCP extra; a Python environment and the package are needed. Target services must be reachable over the network. Auth credentials are supplied inside each connector spec rather than through declared environment variables.
Installation
In SourceWeft
- Open Mcp Api Connect in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
mcp-api-connect™
[License: Apache 2.0] [Python 3.10+]
One payload in, any API out. mcp-api-connect is a protocol- and auth-agnostic connector engine: describe a target service (URL, protocol, auth, request/ response shape) once, then send it a normalized payload and get a normalized response back — whether the target is a REST/JSON API, a legacy SOAP service, protected by an API key, Basic auth, a Bearer token, or OAuth2 client credentials.
It ships as three things built on the same core engine, so however you want to use it, you can:
- A Python library —
pip install mcp-api-connect, callMCPAPIConnectEnginedirectly, no server required. - A standalone HTTP API —
pip install mcp-api-connect[api], runmcp-api-connect-api, POST to/invoke. - An MCP server —
pip install mcp-api-connect[mcp], runmcp-api-connect, point any MCP client (Claude, etc.) at it so an agent can call registered connectors — or arbitrary services on the fly — as tools.
Why
Every integration project reinvents the same wheel: a REST client here, a
SOAP client there, one auth flow per service, ad-hoc request/response
mapping scattered across the codebase. mcp-api-connect centralizes that into one
declarative spec (InvokeSpec) and one execution engine, so adding a new
target service is config, not code.
Quick start (library)
Quick start (HTTP API)
Register a reusable connector once, then invoke it by name:
Quick start (MCP)
Or run it in a container (stdio transport):
Exposes tools: invoke (stateless, one-off), register_connector,
list_connectors, invoke_connector (by name), delete_connector. An agent
can register a connector for "the Salesforce API" once, then just say "call
it with this payload" from then on.
➜ Full setup for Claude Desktop / Claude Code / Cursor, persistence, security notes, and a worked example: docs/mcp-integration.md.
Core concepts
Target— base URL, protocol (rest|soap), timeout, default headers.AuthSpec—type(none,api_key,basic,bearer,oauth2_client_credentials) + aconfigdict shaped for that type. OAuth2 tokens are fetched and cached automatically.RequestFormat/ResponseFormat— content type (json,xml,soap) plus a declarativefield_map({"target.path": "$.source.jsonpath"}) for reshaping payloads without writing code, or a Jinja2body_templatefor full control (required for SOAP envelopes).InvokeSpec— bundles the three above; the unit of "how to reach one service." Store it as a namedConnectoror pass it inline per call.
See src/mcp_api_connect/core/models.py for the
full schema, and docs/auth-reference.md for the
config shape each auth type expects.
Documentation
- docs/mcp-integration.md — full MCP client setup (Claude Desktop, Claude Code, Cursor), persistence, security, tool reference, worked example, troubleshooting
- docs/auth-reference.md —
configfields for every auth type - CONTRIBUTING.md — dev setup, running tests, PR expectations
Extending
- New auth type: implement
AuthStrategy, register viaengine.register_auth_strategy(...). - New protocol (e.g. GraphQL): implement
ProtocolAdapter, register viaengine.register_adapter(...). - New connector storage backend: implement
ConnectorStore(ships withInMemoryConnectorStoreandSqliteConnectorStore, credentials encrypted at rest via Fernet).
Roadmap
- OAuth2 authorization-code flow, mTLS, AWS SigV4 auth strategies
- WSDL-driven SOAP (optional
zeep-backed adapter, no hand-written envelope needed) - GraphQL adapter
- Postgres-backed
ConnectorStore - Retry/backoff + rate limiting policies per connector
- SSRF-safe target allow-listing for public deployments
Development
License
Apache License 2.0 — see LICENSE and NOTICE.
Contributions are accepted under the same license (inbound = outbound); see CONTRIBUTING.md.
Trademark
mcp-api-connect™ is a trademark of Balaji Venkatasubramaniyar. The Apache 2.0 license covers copyright and patents but grants no trademark rights. You may use the name to refer to this project and to state compatibility, but not to name a fork, product, or service, or to imply endorsement. See TRADEMARKS.md for the full policy.
Source: README.md at commit 29e0246
Tools
0Version history
1- v0.1.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts