Yapi Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Yapi Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
YApi MCP Server（Node.js + MCP SDK），提供按需查询的两个核心工具：
search_yapi_interfacesget_yapi_interface_detailToken 仅支持 project 级。group 级 URL 不支持鉴权。npm install
npm run build本地开发：
npm run devYAPI_BASE_URL（必填）YAPI_TOKEN_FILE（可选，默认 ~/.yapi-mcp-tokens.json）YAPI_TIMEOUT_MS（可选，默认 8000）YAPI_RETRY_COUNT（可选，默认 1）YAPI_TOKEN（可选，单项目临时兜底）路径：~/.yapi-mcp-tokens.json
{
"695": "token_for_project_695",
"703": "token_for_project_703"
}{
"mcpServers": {
"yapi": {
"command": "node",
"args": ["D:/self/yapi-mcp/dist/index.js"],
"env": {
"YAPI_BASE_URL": "http://10.255.30.245:3000"
}
}
}
}如果你后续发布 npm 包，也可改为：
{
"mcpServers": {
"yapi": {
"command": "npx",
"args": ["-y", "@wllcyg001/yapi-mcp"],
"env": {
"YAPI_BASE_URL": "http://10.255.30.245:3000"
}
}
}
}search_yapi_interfaces输入：
keyword: string（必填）projectId?: numberprojectUrl?: string（如 .../project/695/interface/api）method?: "GET" | "POST" | "PUT" | "DELETE" | "PATCH"pathHint?: stringlimit?: number（默认 10，最大 50）输出：
interfaceId / name / method / path / projectId / scoreget_yapi_interface_detail输入：
interfaceId: number（必填）projectId?: numberprojectUrl?: stringincludeMock?: boolean（默认 false）输出：
INVALID_ARGUMENTPROJECT_ID_REQUIREDPROJECT_TOKEN_REQUIREDTOKEN_SCOPE_UNSUPPORTEDPROJECT_NOT_ACCESSIBLEINTERFACE_NOT_FOUNDUPSTREAM_TIMEOUTUPSTREAM_ERRORRATE_LIMITED~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.