← Back to search

@emreyc/swagger-mcp

GitHub Actions Scanned 5d ago

Read-only MCP server for navigating OpenAPI/Swagger specifications.

npm
B
85.6 / 100

Versions

0.2.1latest
Jul 8, 2026
0.2.0
Jul 8, 2026
0.1.1
Jul 8, 2026
0.1.0
Jul 8, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 9

get_api_overview
annotations: none low

Top-level API metadata: title, version, description, servers, global security, and counts. Start here on an unfamiliar API.

list_tags
annotations: none low

List the API's tags (logical groups) with descriptions and endpoint counts.

list_endpoints
annotations: none low

Compact index of endpoints (method, path, summary, tags). Optionally filter by tag.

tag string
search_endpoints
annotations: none low

Substring search over endpoint path, summary, description, tags, and parameter names. Returns matches ranked by relevance.

query string
list_schemas
annotations: none low

List named component/definition schemas with one-line descriptions.

search_schemas
annotations: none low

Substring search over schema names, property names, and descriptions. Returns matches ranked by relevance.

query string
get_endpoint
annotations: none low

Full detail for one endpoint: parameters, request/response schemas, and required auth. Named schemas are shown by name — resolve them with get_schema.

path string method string
get_schema
annotations: none low

Resolve one named schema. Nested named schemas are shown as { \"$schema\": \"Name\" } markers — call get_schema again to expand them.

name string
get_auth
annotations: none low

Full security schemes for the API (OAuth2 flows, scopes, API-key locations) plus the global security requirement.

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 27

low
Tool 'get_api_overview' has no annotations annotation_checker · 100%
low
Tool 'list_tags' has no annotations annotation_checker · 100%
low
Tool 'list_endpoints' has no annotations annotation_checker · 100%
low
Tool 'search_endpoints' has no annotations annotation_checker · 100%
low
Tool 'list_schemas' has no annotations annotation_checker · 100%
low
Tool 'search_schemas' has no annotations annotation_checker · 100%
low
Tool 'get_endpoint' has no annotations annotation_checker · 100%
low
Tool 'get_schema' has no annotations annotation_checker · 100%
low
Tool 'get_auth' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: get_api_overview manifest_parser · 85%
info
Tool: list_tags manifest_parser · 85%
info
Tool: list_endpoints manifest_parser · 85%
info
Tool: search_endpoints manifest_parser · 85%
info
Tool: list_schemas manifest_parser · 85%
info
Tool: search_schemas manifest_parser · 85%
info
Tool: get_endpoint manifest_parser · 85%
info
Tool: get_schema manifest_parser · 85%
info
Tool: get_auth manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 653 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%