Skip to main content
Glama
@mcpx-digital/openapi-summarize

@mcpx-digital/openapi-summarize

@mcpx-digital/openapi-summarize

MCP server for local OpenAPI / Swagger analysis.

Load a local OpenAPI 3 or Swagger 2 JSON/YAML file, summarize endpoints by tag, find operations missing auth, list deprecated ops, and generate a short agent-friendly API cheat sheet.

Local files only. This server never fetches remote specs or credentials. Point tools at files you already have on disk.

Install

npx -y @mcpx-digital/openapi-summarize

Publish note: Prepared for npm as @mcpx-digital/openapi-summarize. Until published, run from a local clone or GitHub.

Related MCP server: swagger-openapi-mcp

Cursor mcp.json example

{
  "mcpServers": {
    "openapi-summarize": {
      "command": "npx",
      "args": ["-y", "@mcpx-digital/openapi-summarize"]
    }
  }
}

Local clone:

{
  "mcpServers": {
    "openapi-summarize": {
      "command": "node",
      "args": ["/absolute/path/to/openapi-summarize-mcp/index.js"]
    }
  }
}

Tools

Tool

What it does

summarize_by_tag

Group endpoints by OpenAPI tag

find_missing_auth

List ops with no security (heuristic)

list_deprecated

List deprecated: true operations

generate_cheat_sheet

Short markdown cheat sheet for agents

Example prompts

  • “Summarize ./openapi.yaml by tag”

  • “Which paths in petstore.json are missing auth?”

  • “Generate an API cheat sheet from api.json”

Development

git clone https://github.com/TheoryofShadows/openapi-summarize-mcp.git
cd openapi-summarize-mcp
npm install
npm test

License

MIT

Available Tools

4 tools
find_missing_authA

Find operations missing security/auth requirements in a local OpenAPI file. Reads a local OpenAPI/Swagger JSON or YAML file path only — does not fetch remote specs.

Inputs: filePath (required).

generate_cheat_sheetA

Generate a short agent-friendly markdown API cheat sheet from a local OpenAPI file. Reads a local OpenAPI/Swagger JSON or YAML file path only — does not fetch remote specs.

Inputs: filePath (required), maxOps.

list_deprecatedA

List deprecated operations in a local OpenAPI file. Reads a local OpenAPI/Swagger JSON or YAML file path only — does not fetch remote specs.

Inputs: filePath (required).

summarize_by_tagA

Load a local OpenAPI/Swagger file and summarize endpoints grouped by tag. Reads a local OpenAPI/Swagger JSON or YAML file path only — does not fetch remote specs.

Inputs: filePath (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    A3.9/5.0

    Scored across 4 tools

    Disambiguation4/5

    Each tool has a distinct OpenAPI analysis purpose, but summarize_by_tag and generate_cheat_sheet both produce summary-style output and could be confused by an agent at a glance. The specific focus on tags versus a compact cheat sheet helps separate them.

    Naming Consistency5/5

    All tool names use consistent snake_case with a verb-led pattern: summarize_by_tag, find_missing_auth, list_deprecated, generate_cheat_sheet. The convention is predictable and readable.

    Tool Count5/5

    Four tools is well-scoped for a focused OpenAPI summarization/analysis server, and each tool contributes a distinct capability without bloat.

    Completeness4/5

    The surface covers the main summarization and audit tasks: grouping by tag, finding missing auth, listing deprecated operations, and generating a cheat sheet. Minor gaps exist, such as listing all endpoints or searching operations, but core workflows are supported.

    Related MCP Connectors

    Related MCP Servers