io.github.jmshinhwa/openapi-security-contract-lint

Official registry Developer tools

Finds the lines in an OpenAPI file that publish an endpoint with no authentication, an API key in th

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @readystack/openapi-security-contract-lint
Claude Code
claude mcp add openapi-security-contract-lint -- npx -y @readystack/openapi-security-contract-lint@1.0.2 --mcp
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "openapi-security-contract-lint": {
            "command": "npx",
            "args": [
                "-y",
                "@readystack/openapi-security-contract-lint@1.0.2",
                "--mcp"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

readystack-themes

VS Code themes by ReadyStack

Frequently asked questions

What is io.github.jmshinhwa/openapi-security-contract-lint?

Finds the lines in an OpenAPI file that publish an endpoint with no authentication, an API key in th

How do I install io.github.jmshinhwa/openapi-security-contract-lint?

It runs on your machine. In Claude Code: claude mcp add openapi-security-contract-lint -- npx -y @readystack/openapi-security-contract-lint@1.0.2 --mcp. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.jmshinhwa/openapi-security-contract-lint need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.jmshinhwa/openapi-security-contract-lint open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.jmshinhwa/openapi-security-contract-lint?

It is published by jmshinhwa. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.