Openapi

io.github.Docat0209由 GitHub 账号 Docat0209 发布v0.2.3更新于 Oct 24, 2026

Turn any OpenAPI/Swagger spec into MCP tools. Zero config, zero code.

已验证STDIO仅桌面开发者工具AI 与机器学习

概览

AI 生成的概览

把任意 OpenAPI 3.x 或 Swagger 2.0 规范转成 MCP 工具,让助手直接调用该规范描述的 REST API 接口。

可以做什么
  • 根据 URL 或本地文件中的 OpenAPI/Swagger 规范生成 MCP 工具,每个接口对应一个工具
  • 调用底层 REST API 接口,路径、查询、请求头和请求体参数被合并为单一扁平参数结构
  • 按 operationId 筛选要暴露的接口,并为工具名添加前缀
  • 通过搜索操作、按标签列出、查看工具详情等元工具浏览大型 API
  • 支持 Bearer 令牌、API Key 或 OAuth2 客户端凭据认证,并对 429/5xx 自动重试
适用场景
当你已有文档化的 REST API,希望助手直接调用它,而不必编写自定义 MCP 服务器或手写工具定义时适用。适合规范较完整的公开或内部 API,也适合接口数量庞大、需要动态发现来控制工具列表的场景。
运行要求
需要 Node.js 18 或更高版本,通过 npx 本地运行或作为库使用。需要一个 OpenAPI 3.x 或 Swagger 2.0 规范,可为远程 URL 或本地文件。需要能访问该规范以及 API 本身的网络。凭据通过命令行参数或配置文件传入,可引用 GITHUB_TOKEN、MCP_OPENAPI_LICENSE_KEY 等环境变量。
安装前请注意
该服务器可调用规范中的所有接口,包括写入和删除操作,建议用 include/exclude 过滤限制范围。认证令牌、API Key 和 OAuth2 客户端密钥通过命令行或配置文件传入,可能被看到,建议改用环境变量引用。请求会发往规范或 --base-url 指定的地址。部分响应处理功能需要付费 Pro 许可证密钥。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Openapi,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

mcp-openapi

Turn any OpenAPI/Swagger spec into MCP tools — so Claude and other AI assistants can call your REST APIs.

[npm version] [License: MIT] [npm downloads]

Point mcp-openapi at any OpenAPI 3.x or Swagger 2.0 spec URL and it generates Model Context Protocol (MCP) tools automatically. No code generation, no config files, no boilerplate. Your AI assistant gets callable tools for every API endpoint in seconds.


Quick Start

1. Run it (no install required):

bash
npx mcp-openapi --spec https://petstore3.swagger.io/api/v3/openapi.json

2. Add it to Claude Desktop (claude_desktop_config.json):

json
{  "mcpServers": {    "petstore": {      "command": "npx",      "args": [        "mcp-openapi",        "--spec", "https://petstore3.swagger.io/api/v3/openapi.json"      ]    }  }}

3. Ask Claude to use it:

"List all available pets in the store"

Claude sees MCP tools like find_pets_by_status, get_pet_by_id, add_pet and calls them directly.


Why mcp-openapi?

Most MCP-to-API bridges require you to write tool definitions by hand or generate code from a spec. mcp-openapi skips all of that.

Featuremcp-openapiHand-written MCP serversGeneric HTTP tools
Zero config setupYesNoPartial
OpenAPI 3.x + Swagger 2.0YesN/AN/A
Flat parameter schemas (LLM-optimized)YesManualNo
Smart tool naming from operationIdYesManualNo
Auth (API key, Bearer, OAuth2)Built-inDIYDIY
Retry with exponential backoffBuilt-inDIYDIY
Response truncation for LLM contextBuilt-inDIYNo

Flat parameter schemas are the key differentiator. Instead of passing nested JSON objects (which LLMs frequently get wrong), mcp-openapi flattens path, query, header, and body parameters into a single flat object. This dramatically improves tool-calling accuracy.


How It Works

OpenAPI/Swagger Spec          mcp-openapi               AI Assistant     (URL or file)                                      (Claude, etc.)          |                         |                         |          |   1. Parse & validate   |                         |          |------------------------>|                         |          |                         |                         |          |   2. Generate MCP tools |                         |          |   (one per endpoint)    |                         |          |------------------------>|                         |          |                         |                         |          |                         |   3. Register tools     |          |                         |   via stdio transport   |          |                         |------------------------>|          |                         |                         |          |                         |   4. AI calls a tool    |          |                         |<------------------------|          |                         |                         |          |   5. Build & execute    |                         |          |   HTTP request          |                         |          |<------------------------|                         |          |                         |                         |          |   6. Return truncated   |                         |          |   response to AI        |                         |          |------------------------>|------------------------>|

Each API endpoint becomes one MCP tool:

  • Tool name is derived from operationId (converted to snake_case) or from method + path
  • Parameters are flattened into a single input schema (path, query, header, and body params merged)
  • Responses are truncated to ~50KB to stay within LLM context limits
  • Errors (429, 5xx) trigger automatic retries with exponential backoff (up to 3 retries)

Claude Desktop Integration

Add any API to Claude Desktop by editing your config file:

Location:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json

Public API (no auth)

json
{  "mcpServers": {    "petstore": {      "command": "npx",      "args": [        "mcp-openapi",        "--spec", "https://petstore3.swagger.io/api/v3/openapi.json"      ]    }  }}

API with Bearer Token

json
{  "mcpServers": {    "github": {      "command": "npx",      "args": [        "mcp-openapi",        "--spec", "https://raw.githubusercontent.com/github/rest-api-description/main/descriptions/api.github.com/api.github.com.json",        "--auth-type", "bearer",        "--auth-token", "$GITHUB_TOKEN",        "--prefix", "github",        "--include", "listReposForAuthenticatedUser,getRepo,listIssues,createIssue"      ],      "env": {        "GITHUB_TOKEN": "ghp_your_token_here"      }    }  }}

API with API Key

json
{  "mcpServers": {    "weather": {      "command": "npx",      "args": [        "mcp-openapi",        "--spec", "https://api.weather.example.com/openapi.json",        "--auth-type", "api-key",        "--auth-name", "X-API-Key",        "--auth-value", "$WEATHER_API_KEY",        "--auth-in", "header"      ],      "env": {        "WEATHER_API_KEY": "your_key_here"      }    }  }}

CLI Reference

bash
npx mcp-openapi --spec <url-or-path> [options]

General Options

OptionShortDefaultDescription
--spec <url|path>-srequiredOpenAPI spec URL or local file path
--config <path>-cJSON config file path
--base-url <url>from specOverride the API base URL
--prefix <name>Prefix for all tool names (e.g. github -> github_list_repos)
--include <patterns>allComma-separated operationIds to include
--exclude <patterns>noneComma-separated operationIds to exclude
--timeout <ms>30000HTTP request timeout in milliseconds
--max-retries <n>3Max retries on 429/5xx responses
--header <name:value>-HCustom header (repeatable)
--transport <type>stdioTransport type: stdio or sse
--port <n>3000Port for SSE transport
--help-hShow help
--version-vShow version
--license-key <key>Pro license key (or $MCP_OPENAPI_LICENSE_KEY env)
--server <selector>0Select API server by index, partial URL, or exact URL
--no-doc-warningsSuppress doc quality warnings on startup
--dynamic-discoveryauto (100+)Enable dynamic tool discovery for large APIs

Auth Options

Bearer token:

OptionDescription
--auth-type bearerUse Bearer token authentication
--auth-token <token>The token value (supports $ENV_VAR syntax)

API key:

OptionDescription
--auth-type api-keyUse API key authentication
--auth-name <name>Header or query parameter name
--auth-value <value>The API key value (supports $ENV_VAR syntax)
--auth-in <header|query>Where to send the key (default: header)

OAuth2 client credentials:

OptionDescription
--auth-type oauth2Use OAuth2 client credentials flow
--auth-client-id <id>OAuth2 client ID
--auth-client-secret <secret>OAuth2 client secret
--auth-token-url <url>Token endpoint URL
--auth-scopes <scopes>Comma-separated scopes

CLI Examples

bash
# Basic usage with a remote specnpx mcp-openapi --spec https://petstore3.swagger.io/api/v3/openapi.json
# Local YAML spec with Bearer authnpx mcp-openapi --spec ./api.yaml --auth-type bearer --auth-token '$API_KEY'
# Filter to specific endpoints with a prefixnpx mcp-openapi --spec ./api.json --prefix myapi --include 'listUsers,getUser'
# Override base URL (useful for local dev)npx mcp-openapi --spec https://api.example.com/openapi.json --base-url http://localhost:3000
# Add custom headersnpx mcp-openapi --spec ./api.json -H 'X-Custom: value' -H 'X-Another: value2'
# Use a JSON config filenpx mcp-openapi --config ./mcp-config.json
# Select staging servernpx mcp-openapi --spec ./api.json --server staging
# Large API with dynamic discoverynpx mcp-openapi --spec https://api.stripe.com/openapi.json --dynamic-discovery

Config File Format

Instead of CLI flags, you can use a JSON config file:

json
{  "spec": "https://api.example.com/openapi.json",  "prefix": "myapi",  "include": ["listUsers", "getUser", "createUser"],  "auth": {    "type": "bearer",    "token": "$API_TOKEN"  },  "timeout": 15000,  "maxRetries": 2,  "headers": {    "X-Custom-Header": "value"  }}

CLI arguments take precedence over config file values.


Supported Specs

FormatVersionsFile types
OpenAPI3.0.x, 3.1.x.json, .yaml, .yml
Swagger2.0.json, .yaml, .yml

Specs can be loaded from:

  • Remote URLs (https://...)
  • Local file paths (./api.yaml, /absolute/path/spec.json)

v0.3.0 Features

Doc Quality Warnings

On startup, mcp-openapi checks each tool's documentation quality. If endpoints have sparse descriptions (under 50 characters), you'll see a warning:

[mcp-openapi] WARN: Doc quality: 11 of 47 tools have sparse documentation (<50 chars)[mcp-openapi] WARN:   Affected: getUser, createOrder, deleteItem, updateCart, listTags, ...[mcp-openapi] WARN:   LLM accuracy may be reduced for these endpoints.

This helps you identify which API endpoints might cause poor LLM tool-calling accuracy. Suppress with --no-doc-warnings.

Server Filtering

OpenAPI specs can define multiple servers (production, staging, dev). Select which one to use:

bash
# Use first server (default behavior)mcp-openapi --spec api.json --server 0
# Match by URL keywordmcp-openapi --spec api.json --server prod
# Exact URLmcp-openapi --spec api.json --server https://api.example.com/v2

If the selector doesn't match, you'll see all available servers listed.

Dynamic Tool Discovery

For large APIs with 100+ endpoints, registering all tools at once can overwhelm the LLM's context. Dynamic discovery solves this by registering 3 meta-tools instead:

Meta-toolDescription
search_operations(query)Search tools by keyword in names, descriptions, and tags
list_by_tag(tag?)Browse tools by OpenAPI tag, or list all tags
get_tool_details(tool_name)Get full parameter schema for a specific tool

The LLM explores the API through these meta-tools, then calls specific endpoints by name.

bash
# Explicit opt-inmcp-openapi --spec large-api.json --dynamic-discovery
# Auto-enabled when spec has 100+ endpointsmcp-openapi --spec https://api.github.com/openapi.json

Or via config file:

json
{  "spec": "https://api.stripe.com/openapi.json",  "dynamicDiscovery": true,  "auth": { "type": "bearer", "token": "$STRIPE_KEY" }}

Pro Features (v0.2.0+)

mcp-openapi includes optional Pro features for teams and power users, gated by a license key.

Custom Response Transforms

Shape API responses with JMESPath expressions before they reach the LLM — reducing token usage and improving accuracy:

json
{  "spec": "https://api.github.com/openapi.json",  "licenseKey": "$MCP_OPENAPI_LICENSE_KEY",  "transforms": {    "list_repos": "data[].{name: name, stars: stargazers_count, url: html_url}",    "list_*": "data[].{id: id, name: name}"  }}

Smart Response Handling

Instead of hard-truncating large responses at 50KB, Pro enables intelligent truncation:

  • Array slicing: Large arrays show first N items + metadata ("showing 10 of 847 items")
  • Depth pruning: Deep nested objects are summarized beyond a configurable depth
  • Structure preservation: You always see the shape of the data, never a mid-JSON cut
json
{  "spec": "./api.json",  "licenseKey": "$MCP_OPENAPI_LICENSE_KEY",  "response": {    "maxLength": 50000,    "arraySliceSize": 10,    "maxDepth": 4  }}

Coming Soon

  • Multi-API Composition — Load multiple OpenAPI specs into one MCP session
  • Usage Analytics — Track tool calls, latency, and error rates

Interested in Pro? Star the repo and open an issue to get early access.


Programmatic Usage

You can also use mcp-openapi as a library in your own MCP server:

typescript
import { createServer } from 'mcp-openapi';
const { server, tools, spec } = await createServer({  spec: 'https://petstore3.swagger.io/api/v3/openapi.json',  prefix: 'petstore',  auth: {    type: 'bearer',    token: process.env.API_TOKEN,  },});
console.log(`Loaded ${tools.length} tools from ${spec.info.title}`);

Requirements

  • Node.js 18 or later
  • An OpenAPI 3.x or Swagger 2.0 spec (URL or local file)

Contributing

Contributions are welcome. Here is how to get started:

bash
git clone https://github.com/Docat0209/mcp-openapi.gitcd mcp-openapipnpm installpnpm testpnpm build

Before submitting a PR:

  1. Add tests for new features
  2. Run pnpm lint and fix any issues
  3. Follow Conventional Commits for commit messages

Related

License

MIT


Keywords

mcp, model-context-protocol, openapi, swagger, claude, ai, llm, api, tools, rest-api, ai-tools, mcp-server

来源:README.md,提交 fff16ab

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v0.2.3最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分