@mcpx-digital/openapi-summarize
Provides tools for analyzing local OpenAPI/Swagger specifications, including summarizing endpoints by tag, finding operations missing auth, listing deprecated operations, and generating an agent-friendly API cheat sheet.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@@mcpx-digital/openapi-summarize summarize the endpoints in ./openapi.yaml by tag"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
@mcpx-digital/openapi-summarize
MCP server for local OpenAPI / Swagger analysis.
Load a local OpenAPI 3 or Swagger 2 JSON/YAML file, summarize endpoints by tag, find operations missing auth, list deprecated ops, and generate a short agent-friendly API cheat sheet.
Local files only. This server never fetches remote specs or credentials. Point tools at files you already have on disk.
Install
npx -y @mcpx-digital/openapi-summarizePublish note: Prepared for npm as
@mcpx-digital/openapi-summarize. Until published, run from a local clone or GitHub.
Related MCP server: swagger-openapi-mcp
Cursor mcp.json example
{
"mcpServers": {
"openapi-summarize": {
"command": "npx",
"args": ["-y", "@mcpx-digital/openapi-summarize"]
}
}
}Local clone:
{
"mcpServers": {
"openapi-summarize": {
"command": "node",
"args": ["/absolute/path/to/openapi-summarize-mcp/index.js"]
}
}
}Tools
Tool | What it does |
| Group endpoints by OpenAPI tag |
| List ops with no security (heuristic) |
| List |
| Short markdown cheat sheet for agents |
Example prompts
“Summarize
./openapi.yamlby tag”“Which paths in
petstore.jsonare missing auth?”“Generate an API cheat sheet from
api.json”
Development
git clone https://github.com/TheoryofShadows/openapi-summarize-mcp.git
cd openapi-summarize-mcp
npm install
npm testLicense
MIT
Available Tools
4 toolsfind_missing_authA
Find operations missing security/auth requirements in a local OpenAPI file. Reads a local OpenAPI/Swagger JSON or YAML file path only — does not fetch remote specs.
Inputs: filePath (required).
generate_cheat_sheetA
Generate a short agent-friendly markdown API cheat sheet from a local OpenAPI file. Reads a local OpenAPI/Swagger JSON or YAML file path only — does not fetch remote specs.
Inputs: filePath (required), maxOps.
list_deprecatedA
List deprecated operations in a local OpenAPI file. Reads a local OpenAPI/Swagger JSON or YAML file path only — does not fetch remote specs.
Inputs: filePath (required).
summarize_by_tagA
Load a local OpenAPI/Swagger file and summarize endpoints grouped by tag. Reads a local OpenAPI/Swagger JSON or YAML file path only — does not fetch remote specs.
Inputs: filePath (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 4 tools
Each tool has a distinct OpenAPI analysis purpose, but summarize_by_tag and generate_cheat_sheet both produce summary-style output and could be confused by an agent at a glance. The specific focus on tags versus a compact cheat sheet helps separate them.
All tool names use consistent snake_case with a verb-led pattern: summarize_by_tag, find_missing_auth, list_deprecated, generate_cheat_sheet. The convention is predictable and readable.
Four tools is well-scoped for a focused OpenAPI summarization/analysis server, and each tool contributes a distinct capability without bloat.
The surface covers the main summarization and audit tasks: grouping by tag, finding missing auth, listing deprecated operations, and generating a cheat sheet. Minor gaps exist, such as listing all endpoints or searching operations, but core workflows are supported.
Related MCP Connectors
Detect breaking changes, generate changelogs, diff, and validate OpenAPI specs.
Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Scores how well AI agents will use your API, 0-100, from its OpenAPI spec. Free and read-only.
Related MCP Servers
- AlicenseAqualityBmaintenanceEnables inspecting local OpenAPI specification files by listing and retrieving spec details with filters and $ref resolution.3MIT
- FlicenseNot gradedqualityDmaintenanceEnables AI to scan and query local OpenAPI/Swagger documentation, listing API groups and endpoints, and generating TypeScript type definitions for specific endpoints.-
- FlicenseAqualityDmaintenanceValidates OpenAPI specs from files, inline content, or URLs, and generates prompts for agent developers based on the API analysis.9-
- AlicenseBqualityBmaintenanceLocal OpenAPI contract checks and breaking-change detection between spec versions for AI coding agents.280 npmMIT