Version 2.7.0 brings significant new features and critical fixes to improve workflow integration and API security.
✨ Highlights
New Arazzo Workflow Integration: Seamlessly convert Arazzo 1.0 workflows into usable MCP tools.
import { fromArazzo } from 'mcp-from-openapi';
const tools = fromArazzo(arazzoDoc, options);Emit TypeScript Call Signatures: Generate TypeScript call signatures directly via emitTypeSignatures.
import { emitTypeSignatures } from 'mcp-from-openapi';
const signatures = emitTypeSignatures(metadata);🔒 Security
- Addressed dependency vulnerabilities and resolved CodeQL alerts to enhance overall security.
🛠 Also in this release
- Added
dottedNamingpreset for bindingns.methodtool names in CodeCall. - Introduced
_meta, tool icons, and security elicitation descriptors for improved metadata handling. - Many fixes based on review findings, improving validation and response parsing.
- Updated documentation badges and examples to reflect the latest features and API stabilization.
⚠️ Upgrading
| Change | Impact |
|---|---|
| Skipped reference-object parameters in validation | Enhances structural validation |
| Omitted non-object output schemas from SDK configs | Ensures correct schema handling |
Full change list
Features
- feat: add fromArazzo() converting Arazzo 1.0 workflows into consolidated MCP tools
- feat: emit _meta, tool icons, x-mcp-header markers, and security elicitation descriptors
- feat: add dottedNaming preset for CodeCall-bindable ns.method tool names
- feat: emit TypeScript call signatures via emitTypeSignatures (metadata.typescript)
Fixes
- fix: resolve local parameter refs in coverage checks and harden example patterns per review
- fix: skip reference-object parameters in structural validation and coverage checks
- fix: omit non-object output schemas from SDK configs and keep flattened multipart bodies as form data
- fix: make toJsonSchema cycle-safe and count path-level parameters in validation
- [Plus additional fixes addressing schema safety, validation, and review findings]
Security
- Cherry-pick: Resolve CodeQL alerts, dependency vulnerabilities, and Dependabot updates
Installation
npm install mcp-from-openapi@2.7.0Release line: 2.7.x · Branch: release/2.7.x · Type: stable