openapi-to-mcp

A minimal MCP server that auto-generates tools from your OpenAPI spec. Optimized for Vercel's serverless architecture.

Quick Start

1. Fork this repo
2. Set OPENAPI_SPEC_URL to your OpenAPI spec URL
3. Deploy to Vercel

Configuration

How It Works

1. On cold start, the server fetches and parses your OpenAPI spec
2. Each API endpoint becomes an MCP tool with a Zod-validated input schema
3. When a tool is called, the request is forwarded to your API with the caller's headers (API key, Bearer token, etc.) passed through unchanged
4. The spec and tools are cached in memory — warm invocations skip the fetch

Running Locally

1. Install dependencies

pnpm install

2. Configure environment variables

Create .env and set OPENAPI_SPEC_URL to your OpenAPI spec. For local dev, this can be a remote URL or an absolute file path:

# Remote URL
OPENAPI_SPEC_URL=https://api.example.com/openapi.yaml

# Or an absolute file path (local dev only)
OPENAPI_SPEC_URL=/path/to/your/openapi.yml

3. Start the dev server

pnpm dev

The server starts at http://localhost:3000/mcp.

4. Connect your MCP client to the local server

How you connect to the MCP server depends on your client (Claude Code, Cursor, VS Code, etc.) — check your client's docs for where to add MCP servers. Most clients use a similar JSON format. Here's an example for Claude Code (.mcp.json):

{
  "mcpServers": {
    "my-api": {
      "type": "http",
      "url": "http://localhost:3000/mcp",
      "headers": {
        "Authorization": "Bearer <your-token>"
      }
    }
  }
}

The headers block above shows a Bearer token, but you can use any header your API requires. The MCP server forwards all headers from your client config to the target API on every tool call without modification — it doesn't validate, store, or care which header is "the auth header". See Auth for examples (API key, Bearer token, multiple headers).

Deploying to Vercel

1. Push this repo to GitHub
2. Import it at vercel.com/new
3. Add OPENAPI_SPEC_URL under Settings > Environment Variables. API_BASE_URL and MCP_SERVER_NAME are optional overrides.

That's it. Your MCP server is live at https://your-project.vercel.app/mcp. Connect clients the same way as local — just swap the URL.

Auth

All headers from your MCP client config are forwarded to the target API on every tool call. The MCP server does not validate or store credentials — your API handles authentication.

Configure whatever headers your API expects in the client config:

// API key auth
"headers": { "X-Api-Key": "<your-key>" }

// Bearer token
"headers": { "Authorization": "Bearer <your-token>" }

// Multiple headers
"headers": { "Authorization": "Bearer <token>", "X-Org-Id": "org_123" }