Back to Browse

Fetch YApi JSON MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Fetch YApi JSON API docs from a project URL for agent client integration.

About

Fetch YApi JSON API docs from a project URL for agent client integration.

Security Report

5.2
Moderate5.2Moderate Risk

The YApi MCP server is a straightforward HTTP client that fetches YApi API documentation using user-supplied credentials from env vars, config files, or runtime settings; no exfiltration, shell execution, or obfuscation was found. The main points of concern are that credentials can be passed as tool arguments (visible in agent transcripts) and that the server sends tokens to whatever base_url is configured, which is expected for this design, plus minor code quality items such as a missing dependency pin on the mcp server import and no validation of base_url scheme. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

13 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

YApi host URL, e.g. https://yapi.example.comOptional

Environment variable: YAPI_BASE_URL

Login JWT or project open tokenRequired

Environment variable: YAPI_TOKEN

Optional uid for login JWT cookie authOptional

Environment variable: YAPI_UID

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-contextdong-yapi-mcp": {
      "env": {
        "YAPI_UID": "your-yapi-uid-here",
        "YAPI_TOKEN": "your-yapi-token-here",
        "YAPI_BASE_URL": "your-yapi-base-url-here"
      },
      "args": [
        "contextdong-yapi-mcp"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Yapi-Mcp

从粘贴的 YApi 项目地址拉取接口文档(JSON 请求 / JSON 响应),供编码 Agent 自动理解并对接客户端项目的 MCP Server。

English

功能

  • 解析 YApi 页面 URL → base_url / project_id / interface_id
  • 列出 / 搜索接口,导出目录
  • 拉取归一化后的请求与响应 JSON(JSON Schema / 示例)
  • 鉴权:登录 JWT(Cookie _yapi_token + _yapi_uid)或项目 open token
  • 动态凭证:环境变量、.env、.yapi-mcp.json、运行时 yapi_configure、或工具参数

快速接入

Cursor / Claude Desktop MCP

{
  "mcpServers": {
    "yapi": {
      "command": "uvx",
      "args": ["--from", "contextdong-yapi-mcp", "yapi-mcp"],
      "env": {
        "YAPI_BASE_URL": "https://yapi.example.com",
        "YAPI_TOKEN": "YOUR_LOGIN_JWT_OR_PROJECT_OPEN_TOKEN"
      }
    }
  }
}

从 Git 安装(不经 PyPI):

{
  "mcpServers": {
    "yapi": {
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/ContextDong/Yapi-Mcp",
        "yapi-mcp"
      ],
      "env": {
        "YAPI_BASE_URL": "https://yapi.example.com",
        "YAPI_TOKEN": "YOUR_TOKEN"
      }
    }
  }
}

或使用 pip:

pip install contextdong-yapi-mcp
# 或: pip install git+https://github.com/ContextDong/Yapi-Mcp

配置凭证(仓库内不存放密钥)

优先级从高到低:

  1. 工具参数(token、base_url)
  2. 运行时 yapi_configure(仅当前 MCP 进程内存)
  3. 环境变量 / .env(YAPI_BASE_URL、YAPI_TOKEN、YAPI_UID、YAPI_COOKIE)
  4. 配置文件 .yapi-mcp.json,或 YAPI_MCP_CONFIG 指向的路径

示例:

cp .env.example .env
cp .yapi-mcp.example.json .yapi-mcp.json
变量说明
YAPI_BASE_URLYApi 主机,如 https://yapi.example.com
YAPI_TOKEN登录 JWT 或 项目 open token
YAPI_UID可选;登录 JWT 一般会自动解析 uid
YAPI_COOKIE可选;原始 Cookie 头覆盖
YAPI_MCP_CONFIG可选;JSON 配置文件路径

切勿提交 .env、.yapi-mcp.json 或真实 token。

工具列表

工具用途
yapi_configure / yapi_get_config动态配置 / 查看非敏感配置
yapi_parse_url从页面 URL 解析主机与 id
yapi_get_project项目元信息
yapi_list_interfaces可搜索的接口索引
yapi_get_interface单个接口完整 JSON 定义(便于写客户端)
yapi_export_catalog导出目录(可选详情)

Agent 用法

在对话中粘贴项目地址:

根据 https://yapi.example.com/project/123/interface/api/ 对接登录相关接口

Agent 应先配置凭证(如需要),再列表 / 拉详情,最后按目标工程现有风格实现客户端。

可选 Skill:.cursor/skills/yapi-api-client/SKILL.md

本地开发

python -m pip install -e ".[dev]"
python -m pytest
python -m yapi_mcp.server

MCP Registry

  • 官方名:io.github.ContextDong/yapi-mcp
  • PyPI 包:contextdong-yapi-mcp(uvx / 命令 yapi-mcp)
  • 说明:短名 yapi-mcp 在 PyPI 上已被其他项目占用

License

MIT

Reviews

No reviews yet

Be the first to review this server!