43
/ 100
8 days ago
glama

openapi-anything

Enables creating and using REST APIs from natural language descriptions, with MCP tools to generate, manage, and interact with deployed API wrappers.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: GATEWAY_API_KEY, LITELLM_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configXDG_RUNTIME_DIR
configGATEWAY_PROXY_HOST127.0.0.1 Host wrappers are reachable on from the gateway
🔐 secretGATEWAY_API_KEYOpt-in: unset (default) and the gateway is fully open, as before.
configHEALTH_SWEEP_INTERVAL30 Seconds between registry health sweeps
configHEALTH_PROBE_TIMEOUT2 Per-wrapper /health probe timeout (s)
configREDIS_URLunset (in-memory) Job persistence backend; compose sets redis://redis:6379/0. History survives restarts; interrupted jobs are marked failed
configJOBS_HISTORY_MAX200 Terminal jobs kept in history before pruning oldest
configPROXY_TIMEOUT30 Gateway → wrapper proxy timeout (s)
configMCP_SPEC_TTLopenapi.json (cached s).
configMETRICS_FLUSH_INTERVAL30 Seconds between metric flushes to redis
configNAME
configLITELLM_BASE_URL
🔐 secretLITELLM_API_KEY(required, no default) Proxy API key — set via .env, never commit it
configLLM_REQUEST_TIMEOUT120 Per-request timeout (s)
configLLM_MODELGLM-5.2 Model id (must match proxy /v1/models)
configLLM_JSON_MAX_TOKENS8000 JSON-mode budget — reasoning models burn hidden thinking tokens against it
configWRAPPER_OUTPUT_BASE/tmp/openapi-anything-wrappers Generated wrapper code directory
configPIPELINE_MAX_RETRIES5 LLM fix-loop attempts before the safe fallback
configSEARXNG_BASE_URLresearch via a SearxNG instance (, default
configSEARXNG_TIMEOUT10 Search request timeout (s)
configSEARXNG_MAX_RESULTS5 Research hits fed into inspection/design
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/schniggie-openapi-anything-jbtqsa)](https://m8ven.ai/mcp/schniggie-openapi-anything-jbtqsa)
commit: bdc7a9d7003a798dcab7c94c5816e54273d86b02
code hash: 41b0223fb47539ca41d81282b978dcbe723235d138685e5cd0ffc7cebb68e863
verified: 7/23/2026, 9:07:40 AM
view raw JSON →