@mcpx-digital/openapi-summarize
# @mcpx-digital/openapi-summarize
**MCP server for local OpenAPI / Swagger analysis.**
Load a local OpenAPI 3 or Swagger 2 JSON/YAML file, summarize endpoints by tag, find operations missing auth, list deprecated ops, and generate a short agent-friendly API cheat sheet.
> **Local files only.** This server never fetches remote specs or credentials. Point tools at files you already have on disk.
## Install
```bash
npx -y @mcpx-digital/openapi-summarize
```
> **Publish note:** Prepared for npm as `@mcpx-digital/openapi-summarize`. Until published, run from a local clone or GitHub.
## Cursor `mcp.json` example
```json
{
"mcpServers": {
"openapi-summarize": {
"command": "npx",
"args": ["-y", "@mcpx-digital/openapi-summarize"]
}
}
}
```
Local clone:
```json
{
"mcpServers": {
"openapi-summarize": {
"command": "node",
"args": ["/absolute/path/to/openapi-summarize-mcp/index.js"]
}
}
}
```
## Tools
| Tool | What it does |
|------|----------------|
| `summarize_by_tag` | Group endpoints by OpenAPI tag |
| `find_missing_auth` | List ops with no security (heuristic) |
| `list_deprecated` | List `deprecated: true` operations |
| `generate_cheat_sheet` | Short markdown cheat sheet for agents |
## Example prompts
- “Summarize `./openapi.yaml` by tag”
- “Which paths in `petstore.json` are missing auth?”
- “Generate an API cheat sheet from `api.json`”
## Development
```bash
git clone https://github.com/TheoryofShadows/openapi-summarize-mcp.git
cd openapi-summarize-mcp
npm install
npm test
```
## License
MIT
TDQS
Scored across 4 tools
Each tool has a distinct OpenAPI analysis purpose, but summarize_by_tag and generate_cheat_sheet both produce summary-style output and could be confused by an agent at a glance. The specific focus on tags versus a compact cheat sheet helps separate them.
All tool names use consistent snake_case with a verb-led pattern: summarize_by_tag, find_missing_auth, list_deprecated, generate_cheat_sheet. The convention is predictable and readable.
Four tools is well-scoped for a focused OpenAPI summarization/analysis server, and each tool contributes a distinct capability without bloat.
The surface covers the main summarization and audit tasks: grouping by tag, finding missing auth, listing deprecated operations, and generating a cheat sheet. Minor gaps exist, such as listing all endpoints or searching operations, but core workflows are supported.