74
grade C
10 days ago
glama
mcp-openapi-runner
Turn any OpenAPI spec into MCP tools for Claude — instantly. Point mcp-openapi at any OpenAPI 3.x spec and Claude can call every endpoint through natural language. No custom integration code. No manual tool definitions. One line of config.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: OPENAPI_API_KEY, OPENAPI_BASIC_PASS, OPENAPI_BEARER_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
OPENAPI_API_KEY— "": "dev-key-123"config
OPENAPI_API_KEY_HEADER— Header name for API key (default: X-Api-Key)🔐 secret
OPENAPI_BASIC_PASS— "": "your-api-token"config
OPENAPI_BASIC_USER— "": "you@company.com",🔐 secret
OPENAPI_BEARER_TOKEN— "": "sk_test_..."config
OPENAPI_FILTERconfig
OPENAPI_SERVER_URLconfig
OPENAPI_SPEC_URL// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/saurav61091-mcp-openapi-19ds7j)commit: 5280cfd1d50c13164764cd3dfca3b5c5809973b7
code hash: ebd26ea837b46db68c4116c87c9fce2337ee0f43a657bc21f1e7438447101d12
verified: 4/11/2026, 2:34:06 PM