Specrun

io.github.pavelpihaPublished by GitHub account pavelpihav1.4.0Updated Oct 24, 2026

MCP server that converts OpenAPI specs into tools which can query API endpoints

VerifiedSTDIODesktop onlyWeb Search & ScrapingDeveloper Tools

Overview

AI-generated overview

A local MCP server that turns OpenAPI specification files in a folder into tools an assistant can call to query the described APIs.

What you can do
Load OpenAPI 3.0 and Swagger 2.0 spec files from a specs folder and expose each operation as a callable tool, with namespacing per spec file and automatic tool naming from operationId or method and path. Call any generated tool with structured JSON parameters and request bodies, and get back a JSON resource with the request URL, request body, and response status and body. Inspect a tool's original spec details, including parameters and request and response schemas. Run any tool in batch with multiple inputs and get one consolidated result, with confirmation required for batches over 200 items. Use built-in prompts to list APIs, generate input payloads, explain schemas, and produce sample or
When to use it
Useful when you have one or more OpenAPI or Swagger specs and want an assistant to explore and call those APIs directly, for example to read data or create records, without writing a custom integration per API. Also handy for inspecting endpoint schemas and generating example request payloads.
Requirements
Runs locally as a Node.js process (Node.js 22 or newer), installed globally or via npx. Needs a specs folder containing .json, .yaml, or .yml OpenAPI files, passed with the --specs argument; absolute paths without spaces are recommended. Authentication is optional and read from a .env file in the specs folder using patterns such as {API_NAME}_API_KEY, {API_NAME}_TOKEN, {API_NAME}_BEARER_TOKEN, or {API_NAME}_USERNAME with {API_NAME}_PASSWORD.
Before you install
The server writes to your spec files: when {API_NAME}_SERVER_URL is set it updates the servers entry or host, schemes, and basePath, and it adds empty placeholder entries to the .env file. Credentials live in a plain .env file in the specs folder. Generated tools call real APIs, so calls can create, change, or delete remote data and may incur costs or side effects; batch runs can multiply this, and large batches need explicit confirmation.

Installation

In SourceWeft

  1. Open Specrun in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

SpecRun

An MCP server that turns OpenAPI specifications into MCP tools. Scans a folder for OpenAPI spec files and automatically generate corresponding tools. These tools can then be used in any MCP client to interact with the APIs defined by the specs, with built-in support for authentication and server URL management via a simple `.env` file.

Built with FastMCP for TypeScript.

✨ Features

  • Zero Configuration: Filesystem is the interface - just drop OpenAPI specs in a folder
  • Supports OpenAPI 3.0 and 2.0: Works with both OpenAPI 3.x and Swagger 2.0 specs
  • Namespace Isolation: Multiple APIs coexist cleanly
  • Full OpenAPI Support: Handles parameters, request bodies, authentication, and responses
  • Run Any Tool to Interact with APIs: For example, cars_addCar to call POST /cars from cars.json spec to create a new car, or github_get_user_repos to call GET /user/repos from github.yaml spec to list repos.
  • Run Any Tool with Custom Inputs: Pass structured JSON inputs for parameters and request bodies
  • Run Any Tool to see Spec Details: Get the original OpenAPI spec details for any tool, including parameters, request body schema, and response schema
  • Run Any Tool to get API responses as resources: Each tool call returns a JSON resource containing request URL, request body, and response
  • Run Any Tool in Batch: One specrun_batch tool can execute any tool with multiple inputs and returns a consolidated JSON resource
  • Auto Authentication: Simple .env file with {API_NAME}_API_KEY pattern
  • Auto .env Placeholders: Adds {API_NAME}_SERVER_URL and {API_NAME}_BEARER_TOKEN entries when missing
  • Multiple Transports: Support for stdio and HTTP streaming
  • Built-in Debugging: List command to see loaded specs and tools
  • MCP Prompts: Built-in prompts for listing tools, generating inputs, and explaining schemas
  • Agent: configured agent for using SpecRun tools to explore and operate APIs in a guided way (.github/agents/specrun.agent.md)

Quick Start

Requirements

  • Node.js 22 or newer

1️⃣ Install (optional)

bash
npm install -g specrun

2️⃣ Create a specs folder where the server can read OpenAPI spec files. For example:

bash
mkdir ~/specs

3️⃣ Add OpenAPI specs

Drop any .json, .yaml, or .yml OpenAPI specification files into your specs folder

4️⃣ Configure authentication (optional)

Create a .env file in your specs folder:

bash
# ~/specs/.envCARS_API_KEY=your_api_key_here

SpecRun will also ensure {API_NAME}_SERVER_URL and {API_NAME}_BEARER_TOKEN entries exist for each spec, adding empty placeholders when missing. When {API_NAME}_SERVER_URL has a value, SpecRun updates the spec file on load:

  • OpenAPI 3.0: updates the first servers entry.
  • OpenAPI 2.0 (formerly Swagger 2.0): updates host, schemes, and basePath (no servers section in OpenAPI 2.0).

SpecRun also watches the .env file and refreshes server URLs and auth config automatically after changes.

5️⃣ Add to MCP client configuration

Add to your MCP configuration:

If installed on your machine:

json
{  "mcpServers": {    "specrun": {      "command": "specrun",      "args": ["--specs", "/path/to/your/specs/folder"]    }  }}

Otherwise:

json
{  "mcpServers": {    "specrun": {      "command": "npx",      "args": ["-y", "specrun", "--specs", "/absolute/path/to/your/specs"]    }  }}

or with specific Node version:

json
{  "mcpServers": {    "specrun": {      "command": "/Users/YOUR_USER_NAME/.local/bin/mcp-npx-node22",      "args": ["specrun@latest", "--specs", "/absolute/path/to/your/specs"],      "type": "stdio"    }  }}

The mcp-npx-node22 script file uses nvm to run specrun with Node.js 22.14.0, ensuring compatibility regardless of the default Node version on your system.:

bash
#!/bin/bash# Set the PATH to include NVM's Node.js v22.14.0 installationexport PATH="/Users/YOUR_USER_NAME/.nvm/versions/node/v22.14.0/bin:$PATH"
# Execute npx with all passed argumentsexec npx "$@"

💻 CLI Usage

🚀 Start the server

bash
# Default: stdio transport, current directoryspecrun
# Custom specs folderspecrun --specs ~/specs
# HTTP transport modespecrun --transport httpStream --port 8080

Run with Node 22 using npx

If your default node is older than 22, run SpecRun with Node 22 directly:

  • npx -y node@22 ... runs the Node.js runtime, so the next argument must be a script path (for example ./node_modules/.bin/specrun).
  • specrun@latest is an npm package spec and works directly with npx only when your current Node version already satisfies SpecRun requirements.
bash

# Or list toolsnpx -y node@22 ./node_modules/.bin/specrun list --specs ~/specs
# If your default Node is already 22+, this also worksnpx -y specrun@latest --specs ~/specs

📋 List loaded specs and tools

bash
# List all loaded specifications and their toolsspecrun list
# List specs from custom folderspecrun list --specs ~/specs

🔑 Authentication Patterns

The server automatically detects authentication from environment variables using these patterns:

PatternAuth TypeUsage
{API_NAME}_API_KEY🗝️ API KeyX-API-Key header
{API_NAME}_TOKEN🎫 Bearer TokenAuthorization: Bearer {token}
{API_NAME}_BEARER_TOKEN🎫 Bearer TokenAuthorization: Bearer {token}
{API_NAME}_USERNAME + {API_NAME}_PASSWORD👤 Basic AuthAuthorization: Basic {base64}

SpecRun also creates .env placeholders for:

PatternPurpose
{API_NAME}_SERVER_URLBase URL for the API
{API_NAME}_BEARER_TOKENToken placeholder if missing

If {API_NAME}_SERVER_URL is set, SpecRun writes that value into the spec before generating tools:

  • OpenAPI 3.0: writes the first servers entry.
  • OpenAPI 2.0 (formerly Swagger 2.0): writes host, schemes, and basePath.

Updates to .env are applied automatically without restarting the MCP server.

The {API_NAME} is derived from the filename of your OpenAPI spec:

  • cars.json → CARS_API_KEY
  • github-api.yaml → GITHUB_TOKEN
  • my_custom_api.yml → MY_CUSTOM_API_KEY

🏷️ Tool Naming

Tools are automatically named using this pattern:

  • With operationId: {operation_id}
  • Without operationId: {method}_{path_segments}

Name normalization rules:

  • Converted to snake_case
  • Lowercased
  • Non-alphanumeric characters normalized to _
  • Truncated at the end when longer than 52 characters. (For VS Code/Copilot compatibility, stays within the practical 64-char internal limit.)
  • Adds short suffixes only when needed to resolve collisions

Specs:

  • get_car_by_id (from operationId)
  • get_user_repos (generated from GET /user/repos)

Use the shared batch tool to run any tool with an array of inputs:

json
{  "toolName": "cars_getCarById",  "items": [{ "id": "123" }, { "id": "456" }],  "failFast": false}

Batch responses return a consolidated JSON resource with per-item outputs.

For batches over 200 items, SpecRun requires explicit confirmation. This is to prevent accidental large runs that could cause performance issues or unintended consequences. The server will return a message asking for confirmation, and you can retry with confirmLargeBatch: true and the provided confirmLargeBatchToken to proceed.

📦 Resource Outputs

Tool responses are returned as MCP resources with application/json content. Each resource includes:

  1. Request URL
  2. Request body
  3. Response status and body

Example resource payload:

json
{  "requestUrl": "https://api.example.com/v1/users/123",  "requestBody": null,  "response": {    "status": 200,    "body": {      "id": "123",      "name": "Jane Doe"    }  }}

Batch runs return a single consolidated resource containing all item results.

📁 File Structure

your-project/── specs/           # Your OpenAPI specs folder   ├── .env            # Authentication credentials   └── custom-api.yml  # Your OpenAPI spec files

🧭 MCP Prompts

SpecRun exposes MCP prompts for common workflows:

Detailed prompt guide with examples: PROMPTS_README.md

  • list_apis: List loaded APIs/tools and ask the user to choose an endpoint
  • generate_api_call: Generate a ready-to-run JSON input payload for a tool
  • explain_api_schema: Explain parameters and request body schema with examples
  • generate_random_data: Generate random ready-to-run JSON payload samples for a tool

📄 Example OpenAPI Spec

Here's a minimal example that creates two tools:

yaml
# ~/specs/example.yamlopenapi: 3.0.0info:  title: Example API  version: 1.0.0servers:  - url: https://api-server.placeholderpaths:  /users/{id}:    get:      operationId: getUser      summary: Get user by ID      parameters:        - name: id          in: path          required: true          schema:            type: string      responses:        "200":          description: User found  /users:    post:      operationId: createUser      summary: Create a new user      requestBody:        required: true        content:          application/json:            schema:              type: object              properties:                name:                  type: string                email:                  type: string      responses:        "201":          description: User created

This creates tools named:

  • example_getUser
  • example_createUser

🔧 Troubleshooting

❌ No tools appearing?

  1. Check that your OpenAPI specs are valid:

    bash
    specrun list --specs /path/to/specs
  2. Ensure files have correct extensions (.json, .yaml, .yml)

  3. Check the server logs for parsing errors

⚠️ Note: SpecRun works best when you use absolute paths (with no spaces) for the --specs argument and other file paths. Relative paths or paths containing spaces may cause issues on some platforms or with some MCP clients.

🔐 Authentication not working?

  1. Verify your .env file is in the specs directory
  2. Check the naming pattern matches your spec filename
  3. Use the list command to verify auth configuration:
    bash
    specrun list

🔄 Tools not updating after spec changes?

  1. Restart the MCP server to reload the specs
  2. Check file permissions
  3. Restart the MCP client if needed

🛠️ Development

bash
# Clone and installgit clone [email protected]:Pavel-Piha/specrun.gitcd specrunnpm install
# Buildnpm run build
npm run dev -- list --specs ./specs

🤝 Contributing

Contributions are welcome! Please feel free to submit issues and pull requests.

Source: README.md at commit d3d6811

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.4.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts