Mcp Api Connect

io.github.bvenkataPublished by GitHub account bvenkatav0.1.0Updated Oct 25, 2026

Protocol- & auth-agnostic API connector: SOAP/REST behind any auth, config-driven. Lib/API/MCP.

Overview

AI-generated overview

A config-driven connector engine that lets an assistant call REST or SOAP APIs behind various auth schemes through reusable or one-off connector specs.

What you can do
Invoke any REST or SOAP service once with an inline spec (URL, protocol, auth, request and response shape). Register, list, invoke by name, and delete reusable named connectors. Handle API key, Basic, Bearer and OAuth2 client-credentials auth, with OAuth2 tokens fetched and cached. Reshape payloads declaratively with field maps or Jinja2 body templates, including SOAP envelopes.
When to use it
Useful when an assistant needs to reach several third-party or internal APIs with different protocols and auth flows, and you want to describe each target once as configuration instead of writing a client per service.
Requirements
Runs locally over stdio as a Python package installed with the MCP extra; a Python environment and the package are needed. Target services must be reachable over the network. Auth credentials are supplied inside each connector spec rather than through declared environment variables.
Before you install
Connector specs carry API keys, Basic credentials, Bearer tokens or OAuth2 client secrets, so treat stored connectors as secrets; the README says credentials are encrypted at rest only with the SQLite store. Invoking connectors sends data to third-party services and can perform writes or deletes on those services. The delete_connector tool removes stored connectors.

Installation

In SourceWeft

  1. Open Mcp Api Connect in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

mcp-api-connect™

[License: Apache 2.0] [Python 3.10+]

One payload in, any API out. mcp-api-connect is a protocol- and auth-agnostic connector engine: describe a target service (URL, protocol, auth, request/ response shape) once, then send it a normalized payload and get a normalized response back — whether the target is a REST/JSON API, a legacy SOAP service, protected by an API key, Basic auth, a Bearer token, or OAuth2 client credentials.

It ships as three things built on the same core engine, so however you want to use it, you can:

  • A Python library — pip install mcp-api-connect, call MCPAPIConnectEngine directly, no server required.
  • A standalone HTTP API — pip install mcp-api-connect[api], run mcp-api-connect-api, POST to /invoke.
  • An MCP server — pip install mcp-api-connect[mcp], run mcp-api-connect, point any MCP client (Claude, etc.) at it so an agent can call registered connectors — or arbitrary services on the fly — as tools.

Why

Every integration project reinvents the same wheel: a REST client here, a SOAP client there, one auth flow per service, ad-hoc request/response mapping scattered across the codebase. mcp-api-connect centralizes that into one declarative spec (InvokeSpec) and one execution engine, so adding a new target service is config, not code.

Quick start (library)

bash
pip install mcp-api-connect
python
import asynciofrom mcp_api_connect import MCPAPIConnectEngine, InvokeSpec, Target, AuthSpec, AuthType, RequestFormat, ResponseFormat
spec = InvokeSpec(    target=Target(base_url="https://api.example.com"),    auth=AuthSpec(type=AuthType.API_KEY, config={"api_key": "secret", "header_name": "X-API-Key"}),    request_format=RequestFormat(method="POST", path="/v1/orders", content_type="json"),    response_format=ResponseFormat(content_type="json"),)
async def main():    async with MCPAPIConnectEngine() as engine:        result = await engine.invoke(spec, {"customer": "jane"})        print(result.success, result.data)
asyncio.run(main())

Quick start (HTTP API)

bash
pip install "mcp-api-connect[api]"mcp-api-connect-api   # serves on :8000, interactive docs at /docs
bash
curl -X POST http://localhost:8000/invoke -H 'content-type: application/json' -d '{  "spec": {    "target": {"base_url": "https://api.example.com"},    "auth": {"type": "api_key", "config": {"api_key": "secret"}},    "request_format": {"method": "POST", "path": "/v1/orders"},    "response_format": {"content_type": "json"}  },  "payload": {"customer": "jane"}}'

Register a reusable connector once, then invoke it by name:

bash
curl -X POST http://localhost:8000/connectors -d '{"name": "orders-api", "spec": {...}}'curl -X POST http://localhost:8000/connectors/orders-api/invoke -d '{"customer": "jane"}'

Quick start (MCP)

bash
pip install "mcp-api-connect[mcp]"
json
{  "mcpServers": {    "mcp-api-connect": { "command": "/path/to/.venv/bin/mcp-api-connect" }  }}

Or run it in a container (stdio transport):

bash
docker build -t mcp-api-connect .docker run --rm -i mcp-api-connect

Exposes tools: invoke (stateless, one-off), register_connector, list_connectors, invoke_connector (by name), delete_connector. An agent can register a connector for "the Salesforce API" once, then just say "call it with this payload" from then on.

➜ Full setup for Claude Desktop / Claude Code / Cursor, persistence, security notes, and a worked example: docs/mcp-integration.md.

Core concepts

  • Target — base URL, protocol (rest | soap), timeout, default headers.
  • AuthSpec — type (none, api_key, basic, bearer, oauth2_client_credentials) + a config dict shaped for that type. OAuth2 tokens are fetched and cached automatically.
  • RequestFormat / ResponseFormat — content type (json, xml, soap) plus a declarative field_map ({"target.path": "$.source.jsonpath"}) for reshaping payloads without writing code, or a Jinja2 body_template for full control (required for SOAP envelopes).
  • InvokeSpec — bundles the three above; the unit of "how to reach one service." Store it as a named Connector or pass it inline per call.

See src/mcp_api_connect/core/models.py for the full schema, and docs/auth-reference.md for the config shape each auth type expects.

Documentation

Extending

  • New auth type: implement AuthStrategy, register via engine.register_auth_strategy(...).
  • New protocol (e.g. GraphQL): implement ProtocolAdapter, register via engine.register_adapter(...).
  • New connector storage backend: implement ConnectorStore (ships with InMemoryConnectorStore and SqliteConnectorStore, credentials encrypted at rest via Fernet).

Roadmap

  • OAuth2 authorization-code flow, mTLS, AWS SigV4 auth strategies
  • WSDL-driven SOAP (optional zeep-backed adapter, no hand-written envelope needed)
  • GraphQL adapter
  • Postgres-backed ConnectorStore
  • Retry/backoff + rate limiting policies per connector
  • SSRF-safe target allow-listing for public deployments

Development

bash
python -m venv .venv && source .venv/bin/activatepip install -e ".[dev,api,storage,mcp]"pytest

License

Apache License 2.0 — see LICENSE and NOTICE.

Contributions are accepted under the same license (inbound = outbound); see CONTRIBUTING.md.

Trademark

mcp-api-connect™ is a trademark of Balaji Venkatasubramaniyar. The Apache 2.0 license covers copyright and patents but grants no trademark rights. You may use the name to refer to this project and to state compatibility, but not to name a fork, product, or service, or to imply endorsement. See TRADEMARKS.md for the full policy.

Source: README.md at commit 29e0246

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts