io.github.jmshinhwa/openapi-security-contract-lint (MCP Server)

This MCP server is associated with the io.github.jmshinhwa/openapi-security-contract-lint package. Its description indicates it “finds the lines in an OpenAPI file that publish an endpoint with no authentication,” including cases involving an “API key in th…”. Available metadata also lists relevant topics including compliance, devsecops, and linting.

🛠️ Key Features

Lints OpenAPI content to locate endpoints lacking authentication (per the provided description)
Detects publication of unauthenticated endpoints and related conditions (per truncated description)

🚀 Use Cases

Identify security gaps in OpenAPI specifications for compliance and DevSecOps reviews
Support linting workflows in an OpenAPI-based API development process

⚡ Developer Benefits

Provides targeted line-level findings in OpenAPI files for security contract checking
Fits into linter-oriented tooling pipelines (topics: linter, devsecops, compliance)

⚠️ Limitations

Source description is truncated (“API key in th…”), so exact detection rules are not fully specified
No tool count or implementation details are provided in the available data

📚 Topics

compliance, cursor, devsecops, linter, mcp-server, open-vsx, vscode-extension

Install

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "openapi-security-contract-lint": {
      "command": "npx",
      "args": [
        "-y",
        "@readystack/openapi-security-contract-lint@1.0.2",
        "--mcp"
      ]
    }
  }
}

io.github.jmshinhwa/openapi-security-contract-lint