Skip to main content
Glama
TheoryofShadows

@mcpx-digital/openapi-summarize

README.md
# @mcpx-digital/openapi-summarize

**MCP server for local OpenAPI / Swagger analysis.**

Load a local OpenAPI 3 or Swagger 2 JSON/YAML file, summarize endpoints by tag, find operations missing auth, list deprecated ops, and generate a short agent-friendly API cheat sheet.

> **Local files only.** This server never fetches remote specs or credentials. Point tools at files you already have on disk.

## Install

```bash
npx -y @mcpx-digital/openapi-summarize
```

> **Publish note:** Prepared for npm as `@mcpx-digital/openapi-summarize`. Until published, run from a local clone or GitHub.

## Cursor `mcp.json` example

```json
{
  "mcpServers": {
    "openapi-summarize": {
      "command": "npx",
      "args": ["-y", "@mcpx-digital/openapi-summarize"]
    }
  }
}
```

Local clone:

```json
{
  "mcpServers": {
    "openapi-summarize": {
      "command": "node",
      "args": ["/absolute/path/to/openapi-summarize-mcp/index.js"]
    }
  }
}
```

## Tools

| Tool | What it does |
|------|----------------|
| `summarize_by_tag` | Group endpoints by OpenAPI tag |
| `find_missing_auth` | List ops with no security (heuristic) |
| `list_deprecated` | List `deprecated: true` operations |
| `generate_cheat_sheet` | Short markdown cheat sheet for agents |

## Example prompts

- “Summarize `./openapi.yaml` by tag”
- “Which paths in `petstore.json` are missing auth?”
- “Generate an API cheat sheet from `api.json`”

## Development

```bash
git clone https://github.com/TheoryofShadows/openapi-summarize-mcp.git
cd openapi-summarize-mcp
npm install
npm test
```

## License

MIT

TDQS

A3.9/5.0

Scored across 4 tools

Disambiguation4/5

Each tool has a distinct OpenAPI analysis purpose, but summarize_by_tag and generate_cheat_sheet both produce summary-style output and could be confused by an agent at a glance. The specific focus on tags versus a compact cheat sheet helps separate them.

Naming Consistency5/5

All tool names use consistent snake_case with a verb-led pattern: summarize_by_tag, find_missing_auth, list_deprecated, generate_cheat_sheet. The convention is predictable and readable.

Tool Count5/5

Four tools is well-scoped for a focused OpenAPI summarization/analysis server, and each tool contributes a distinct capability without bloat.

Completeness4/5

The surface covers the main summarization and audit tasks: grouping by tag, finding missing auth, listing deprecated operations, and generating a cheat sheet. Minor gaps exist, such as listing all endpoints or searching operations, but core workflows are supported.

Maintenance

ActivityMaintained
ResponsivenessNo issues