MCP Server for OpenAPI-based APIs with built-in authentication management
Most developer tooling work still happens through a UI a human drives. MCP Openapi Connector MCP server moves it into the conversation instead. MCP Server for OpenAPI-based APIs with built-in authentication management.
A unified Model Context Protocol (MCP) server for connecting OpenAPI-based APIs with built-in authentication management. This project enables Claude Desktop, Cursor, and other MCP-compatible clients to interact with authenticated OpenAPI-based APIs without requiring separate proxy servers.
The server ships on npm as @ssossan/mcp-openapi-connector, so your MCP client can launch it on demand — there is no separate build step. Add the server block to your client's configuration, restart it, and the tools register themselves.
Configuration is passed through the environment: CLIENT_ID, CLIENT_SECRET, API_BASE_URL, AUTH_PATH, OPENAPI_SPEC_PATH, CUSTOM_TOOLS_PATH, AUTH_URL. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.
This sits in the developer tooling group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. It is maintained by ssossan; worth a glance at recent repository activity before you build anything load-bearing on it.
We check each listing at SyncDev against the project's documentation before it goes live — if something here drifts out of date, it is a bug worth reporting.
**Using global installation:**
```json
{
"mcpServers": {
"openapi-connector": {
"command": "mcp-openapi-connector",
"env": {
"CLIENT_ID": "your-client-id",
"CLIENT_SECRET": "your-client-secret",
"API_BASE_URL": "https://api.example.com",
"AUTH_PATH": "/oauth/token",
"OPENAPI_SPEC_PATH": "/path/to/openapi.json"
}
}
}
}Configuration as documented by the project. Restart the client after saving.
| Variable | Description | Required |
|---|---|---|
| CLIENT_ID | Configuration value read at startup. | Optional |
| CLIENT_SECRET | Credential the server authenticates with. | Yes |
| API_BASE_URL | Endpoint or connection string the server talks to. | Yes |
| AUTH_PATH | Filesystem location the server is allowed to use. | Optional |
| OPENAPI_SPEC_PATH | Filesystem location the server is allowed to use. | Optional |
| CUSTOM_TOOLS_PATH | Filesystem location the server is allowed to use. | Optional |
| AUTH_URL | Endpoint or connection string the server talks to. | Yes |
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.