
Specrun
io.github.pavelpihaPublished by GitHub account pavelpihav1.4.0Updated Oct 24, 2026
MCP server that converts OpenAPI specs into tools which can query API endpoints
Overview
A local MCP server that turns OpenAPI specification files in a folder into tools an assistant can call to query the described APIs.
- What you can do
- Load OpenAPI 3.0 and Swagger 2.0 spec files from a specs folder and expose each operation as a callable tool, with namespacing per spec file and automatic tool naming from operationId or method and path. Call any generated tool with structured JSON parameters and request bodies, and get back a JSON resource with the request URL, request body, and response status and body. Inspect a tool's original spec details, including parameters and request and response schemas. Run any tool in batch with multiple inputs and get one consolidated result, with confirmation required for batches over 200 items. Use built-in prompts to list APIs, generate input payloads, explain schemas, and produce sample or
- When to use it
- Useful when you have one or more OpenAPI or Swagger specs and want an assistant to explore and call those APIs directly, for example to read data or create records, without writing a custom integration per API. Also handy for inspecting endpoint schemas and generating example request payloads.
- Requirements
- Runs locally as a Node.js process (Node.js 22 or newer), installed globally or via npx. Needs a specs folder containing .json, .yaml, or .yml OpenAPI files, passed with the --specs argument; absolute paths without spaces are recommended. Authentication is optional and read from a .env file in the specs folder using patterns such as {API_NAME}_API_KEY, {API_NAME}_TOKEN, {API_NAME}_BEARER_TOKEN, or {API_NAME}_USERNAME with {API_NAME}_PASSWORD.
Installation
In SourceWeft
- Open Specrun in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
SpecRun
An MCP server that turns OpenAPI specifications into MCP tools. Scans a folder for OpenAPI spec files and automatically generate corresponding tools. These tools can then be used in any MCP client to interact with the APIs defined by the specs, with built-in support for authentication and server URL management via a simple `.env` file.Built with FastMCP for TypeScript.
✨ Features
- Zero Configuration: Filesystem is the interface - just drop OpenAPI specs in a folder
- Supports OpenAPI 3.0 and 2.0: Works with both OpenAPI 3.x and Swagger 2.0 specs
- Namespace Isolation: Multiple APIs coexist cleanly
- Full OpenAPI Support: Handles parameters, request bodies, authentication, and responses
- Run Any Tool to Interact with APIs: For example,
cars_addCarto callPOST /carsfromcars.jsonspec to create a new car, orgithub_get_user_reposto callGET /user/reposfromgithub.yamlspec to list repos. - Run Any Tool with Custom Inputs: Pass structured JSON inputs for parameters and request bodies
- Run Any Tool to see Spec Details: Get the original OpenAPI spec details for any tool, including parameters, request body schema, and response schema
- Run Any Tool to get API responses as resources: Each tool call returns a JSON resource containing request URL, request body, and response
- Run Any Tool in Batch: One
specrun_batchtool can execute any tool with multiple inputs and returns a consolidated JSON resource - Auto Authentication: Simple
.envfile with{API_NAME}_API_KEYpattern - Auto .env Placeholders: Adds
{API_NAME}_SERVER_URLand{API_NAME}_BEARER_TOKENentries when missing - Multiple Transports: Support for stdio and HTTP streaming
- Built-in Debugging: List command to see loaded specs and tools
- MCP Prompts: Built-in prompts for listing tools, generating inputs, and explaining schemas
- Agent: configured agent for using SpecRun tools to explore and operate APIs in a guided way (
.github/agents/specrun.agent.md)
Quick Start
Requirements
- Node.js 22 or newer
1️⃣ Install (optional)
2️⃣ Create a specs folder where the server can read OpenAPI spec files. For example:
3️⃣ Add OpenAPI specs
Drop any .json, .yaml, or .yml OpenAPI specification files into your specs folder
4️⃣ Configure authentication (optional)
Create a .env file in your specs folder:
SpecRun will also ensure {API_NAME}_SERVER_URL and {API_NAME}_BEARER_TOKEN entries exist for each spec, adding empty placeholders when missing.
When {API_NAME}_SERVER_URL has a value, SpecRun updates the spec file on load:
- OpenAPI 3.0: updates the first
serversentry. - OpenAPI 2.0 (formerly Swagger 2.0): updates
host,schemes, andbasePath(noserverssection in OpenAPI 2.0).
SpecRun also watches the .env file and refreshes server URLs and auth config automatically after changes.
5️⃣ Add to MCP client configuration
Add to your MCP configuration:
If installed on your machine:
Otherwise:
or with specific Node version:
The mcp-npx-node22 script file uses nvm to run specrun with Node.js 22.14.0, ensuring compatibility regardless of the default Node version on your system.:
💻 CLI Usage
🚀 Start the server
Run with Node 22 using npx
If your default node is older than 22, run SpecRun with Node 22 directly:
npx -y node@22 ...runs the Node.js runtime, so the next argument must be a script path (for example./node_modules/.bin/specrun).specrun@latestis an npm package spec and works directly withnpxonly when your current Node version already satisfies SpecRun requirements.
📋 List loaded specs and tools
🔑 Authentication Patterns
The server automatically detects authentication from environment variables using these patterns:
SpecRun also creates .env placeholders for:
If {API_NAME}_SERVER_URL is set, SpecRun writes that value into the spec before generating tools:
- OpenAPI 3.0: writes the first
serversentry. - OpenAPI 2.0 (formerly Swagger 2.0): writes
host,schemes, andbasePath.
Updates to .env are applied automatically without restarting the MCP server.
The {API_NAME} is derived from the filename of your OpenAPI spec:
cars.json→CARS_API_KEYgithub-api.yaml→GITHUB_TOKENmy_custom_api.yml→MY_CUSTOM_API_KEY
🏷️ Tool Naming
Tools are automatically named using this pattern:
- With operationId:
{operation_id} - Without operationId:
{method}_{path_segments}
Name normalization rules:
- Converted to
snake_case - Lowercased
- Non-alphanumeric characters normalized to
_ - Truncated at the end when longer than 52 characters. (For VS Code/Copilot compatibility, stays within the practical 64-char internal limit.)
- Adds short suffixes only when needed to resolve collisions
Specs:
get_car_by_id(from operationId)get_user_repos(generated fromGET /user/repos)
Use the shared batch tool to run any tool with an array of inputs:
Batch responses return a consolidated JSON resource with per-item outputs.
For batches over 200 items, SpecRun requires explicit confirmation. This is to prevent accidental large runs that could cause performance issues or unintended consequences. The server will return a message asking for confirmation, and you can retry with confirmLargeBatch: true and the provided confirmLargeBatchToken to proceed.
📦 Resource Outputs
Tool responses are returned as MCP resources with application/json content. Each resource includes:
- Request URL
- Request body
- Response status and body
Example resource payload:
Batch runs return a single consolidated resource containing all item results.
📁 File Structure
🧭 MCP Prompts
SpecRun exposes MCP prompts for common workflows:
Detailed prompt guide with examples: PROMPTS_README.md
list_apis: List loaded APIs/tools and ask the user to choose an endpointgenerate_api_call: Generate a ready-to-run JSON input payload for a toolexplain_api_schema: Explain parameters and request body schema with examplesgenerate_random_data: Generate random ready-to-run JSON payload samples for a tool
📄 Example OpenAPI Spec
Here's a minimal example that creates two tools:
This creates tools named:
example_getUserexample_createUser
🔧 Troubleshooting
❌ No tools appearing?
-
Check that your OpenAPI specs are valid:
-
Ensure files have correct extensions (
.json,.yaml,.yml) -
Check the server logs for parsing errors
⚠️ Note: SpecRun works best when you use absolute paths (with no spaces) for the
--specsargument and other file paths. Relative paths or paths containing spaces may cause issues on some platforms or with some MCP clients.
🔐 Authentication not working?
- Verify your
.envfile is in the specs directory - Check the naming pattern matches your spec filename
- Use the list command to verify auth configuration:
🔄 Tools not updating after spec changes?
- Restart the MCP server to reload the specs
- Check file permissions
- Restart the MCP client if needed
🛠️ Development
🤝 Contributing
Contributions are welcome! Please feel free to submit issues and pull requests.
Source: README.md at commit d3d6811
Tools
0Version history
1- v1.4.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts