openapi-mcp-sdk

Provides a ready-to-run MCP server and Python SDK for securely interacting with Openapi.com APIs, enabling businesses to retrieve official documents and data through natural language.

→ openapi/mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

41 tools verified — handlers match their declared behaviour

20 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: OPENAPI_TOKEN, OPENAPI_SANDBOX_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretOPENAPI_TOKEN

🔐 secretOPENAPI_SANDBOX_TOKEN

configMCP_PORT— 8080 HTTP port the server listens on

configLOG_LEVEL

configMCP_ENV— production Runtime environment: dev \ staging \ production

configMCP_OPENAPI_ENV— _(empty)_ Openapi environment: dev, test, sandbox (alias of test), or empty for production

configMCP_BASE_URL— MCP_CALLBACK_URL $/callbacks Explicit callback URL sent to async APIs

configMCP_CALLBACK_URL— $MCP_BASE_URL/callbacks Explicit callback URL sent to async APIs

configMCP_CACHE_HOST— _(none)_ Memcached host (MCP_CACHE_BACKEND=memcached)

configMCP_CACHE_PORT— 11211 Memcached port

configMCP_STORAGE_BACKEND— local local \ gcs \ s3

configMCP_STORAGE_BUCKET— _(required for cloud)_ Bucket name for gcs or s3

configMCP_STORAGE_PATH— ./openapi_storage Local path for local backend

configMCP_STORAGE_REGION— _(required for s3)_ AWS region for the S3 bucket

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/openapi-mcp-server-5ohx25)](https://m8ven.ai/mcp/openapi-mcp-server-5ohx25)

commit: 75132a780c238f7cc7067158d46271feffe295ab

code hash: ebbab9e5d71a9bd551553e843887e62a32ee17e9a96d831cdc85cb34f5314221

verified: 6/17/2026, 11:39:06 AM

view raw JSON →