OpenAPI MCP Server
Exposes OpenAPI endpoints as MCP tools, enabling LLMs to discover and interact with REST APIs through the MCP protocol.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
process.env. You'll be asked to provide them before it can run.API_BASE_URL— "": "https://api.example.com",API_HEADERS— "": "Authorization:Bearer token123,X-API-Key:your-api-key"BEATPORT_TOKENBROWSER_AUTHBROWSER_AUTH_TIMEOUTCA_CERT_PATH— Path to custom CA certificate PEM file for private/internal CAsCLIENT_CERT_PATH— Path to client certificate PEM file for mutual TLSCLIENT_KEY_PASSPHRASE— Passphrase for an encrypted client private keyCLIENT_KEY_PATH— Path to client private key PEM file for mutual TLSDISABLE_ABBREVIATION— Disable name optimization (this could throw errors when name is > 64 chars)ENDPOINT_PATH— Endpoint path for HTTP transport (default: "/mcp")HTTP_HOST— Host for HTTP transport (default: "127.0.0.1")HTTP_PORT— Port for HTTP transport (default: 3000)OPENAPI_SPEC_FROM_STDIN— Set to "true" to read OpenAPI spec from standard inputOPENAPI_SPEC_INLINE— Provide OpenAPI spec content directly as a stringOPENAPI_SPEC_PATH— "": "https://api.example.com/openapi.json",PROMPTS_INLINE— Provide prompts directly as JSON stringPROMPTS_PATH— Path or URL to prompts JSON/YAML fileREJECT_UNAUTHORIZED— Whether to reject untrusted server certificates (default: true)RESOURCES_INLINE— Provide resources directly as JSON stringRESOURCES_PATH— Path or URL to resources JSON/YAML fileSERVER_NAME— Name for the MCP server (default: "mcp-openapi-server")SERVER_VERSION— Version of the server (default: "1.0.0")TOOLS_MODE— Tools loading mode: "all" (load all endpoint-based tools), "dynamic" (load only meta-tools), or "explicit" (load only tools specified in includeTools) (default: "all")TRANSPORT_TYPE— Transport type to use: "stdio" or "http" (default: "stdio")[](https://m8ven.ai/mcp/kaizen-org-openapi-mcp-server-15un7t)