
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@nam088/mcp-swagger-parser
Advanced tools
Enhanced OpenAPI/Swagger MCP plugin with 12 tools, YAML support, and auto-resolved schemas
Enhanced OpenAPI/Swagger MCP plugin with 12 powerful tools, YAML support, and automatic schema resolution.
✨ 12 Comprehensive Tools
🔍 Auto Schema Resolution
$ref references📄 YAML & JSON Support
.yaml/.yml files🔐 Authentication
npm install @nam088/mcp-swagger-parser
Add to your MCP configuration file:
{
"mcpServers": {
"swagger": {
"command": "npx",
"args": ["-y", "@nam088/mcp-swagger-parser"],
"env": {
"SWAGGER_URL": "http://localhost:3000/docs-json"
}
}
}
}
{
"env": {
"SWAGGER_URL": "https://api.example.com/openapi.yaml",
"SWAGGER_AUTH_TOKEN": "your-bearer-token",
"SWAGGER_BASE_URL": "https://api.example.com"
}
}
swagger_search_toolsSearch for API endpoints by keyword.
{ query: "user" }
swagger_get_endpoint_detailsGet complete endpoint specification with resolved schemas.
{ method: "POST", path: "/api/users" }
swagger_list_tagsList all API categories/tags.
swagger_list_endpoints_by_tagFilter endpoints by tag.
{ tag: "Auth" }
swagger_generate_curlGenerate ready-to-use curl command.
{
method: "POST",
path: "/api/login",
body: { email: "test@example.com" }
}
swagger_generate_example_requestGenerate example request with placeholder values.
{ method: "GET", path: "/api/users/{id}" }
swagger_reloadReload OpenAPI specification from source.
swagger_execute_getExecute GET requests safely (no side effects).
{
path: "/api/users",
params: { limit: "10" }
}
swagger_execute_post/put/patch/deleteExecute write operations (requires FULL mode).
{
path: "/api/users",
body: { name: "John" }
}
| Variable | Description | Default |
|---|---|---|
SWAGGER_URL | OpenAPI spec URL (.json/.yaml) | Required |
SWAGGER_JSON | Direct JSON spec object | Optional |
SWAGGER_BASE_URL | Override base API URL | Auto-detected |
SWAGGER_AUTH_TOKEN | Bearer token | Optional |
SWAGGER_DEFAULT_HEADERS | JSON object of headers | Optional |
{
"SWAGGER_URL": "http://localhost:3000/docs-json"
}
{
"SWAGGER_URL": "https://api.example.com/openapi.yaml"
}
{
"SWAGGER_URL": "https://api.example.com/api-docs",
"SWAGGER_AUTH_TOKEN": "eyJhbGc...",
"SWAGGER_BASE_URL": "https://api.example.com"
}
import { SwaggerParserPlugin } from '@nam088/mcp-swagger-parser';
const plugin = new SwaggerParserPlugin({
url: 'http://localhost:3000/docs-json',
authToken: 'your-token',
baseUrl: 'http://localhost:3000'
});
await plugin.initialize(context);
plugin.register(context);
All $ref references are automatically resolved:
// Before: { "$ref": "#/components/schemas/User" }
// After: {
// "type": "object",
// "properties": {
// "id": { "type": "string" },
// "name": { "type": "string" }
// }
// }
isWriteTool: true# Build
npm run build
# Clean
npm run clean
# Test
npm test
MIT
Nam088
FAQs
Enhanced OpenAPI/Swagger MCP plugin with 12 tools, YAML support, and auto-resolved schemas
We found that @nam088/mcp-swagger-parser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.