MCP server that generates typed clients for any API (OpenAPI, GraphQL, SOAP, AT Protocol) and lets Claude execute code against them
anyapi-mcp has well-structured tool definitions with complete schemas and descriptions for all 8 tools. Naming follows verb_noun convention (add_api, list_apis, search_operations, execute, login, logout, remove, regenerate). Descriptions are substantive (100-200 chars typical). However, several tools lack output schema documentation, and error handling guidance is minimal. The execute tool is particularly high-risk (arbitrary code execution) but lacks confirmation/dry-run patterns. Parameter descriptions are generally good but some lack format/constraint details.
Register an API from an OpenAPI spec, GraphQL endpoint, SOAP WSDL, or AT Protocol service URL
Execute TypeScript code against a registered API's typed client in a sandboxed Deno environment
List all registered APIs with their id, name, base URL, operation count, and authentication status
Authenticate an OAuth 2.0 API or AT Protocol account (opens browser for OAuth, stores credentials in OS keychain)
Remove stored OAuth tokens or AT Protocol credentials for an API
Rebuild generated TypeScript client code for one or more registered APIs (preserves stored credentials)
Remove a registered API and its stored credentials from the registry
Search registered APIs for operations matching a query (by name, description, tag, or parameter)
execute tool lacks confirmation/dry-run pattern for arbitrary code execution. Agents can run untrusted TypeScript without safeguards, risking data loss or unintended API calls.
Output schemas not documented for any tool. LLMs cannot infer what fields to expect from list_apis, search_operations, execute, or login responses, forcing them to guess at downstream field names.
Error handling lacks recovery guidance. No indication of which errors are retryable, user-fixable, or fatal. Agents cannot self-correct on invalid api_id or malformed spec_url.
execute tool description does not warn that code runs in a sandboxed Deno environment with specific permissions. Agents may attempt operations (file I/O, network) that fail silently or with cryptic errors.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 50 | 2025-06-18+ | v2 |
add_api accepts token/app_password as parameters. Credentials should never appear in tool params, use server-side secret injection via environment or keychain instead. Tokens leak into agent traces and logs.