v0.1.0

First release. Turn an existing HTTP API into an MCP server — OpenAPI-first, framework-agnostic, safe by default.

Sources

• OpenAPI 3 (file or URL) — the primary path
• swaggo (OpenAPI 2.0) via auto-conversion
• Live gin / echo / fiber / chi routers (embedded mode)
• Struct reflection for request-body schemas

Curation & safety

• ReadOnly() and tag / path / operation include & exclude filters
• Automatic MCP tool annotations (readOnly / destructive / idempotent / openWorld) derived from the HTTP method
• WithMarkDestructive(...) / WithAnnotator(...) to override hints
• Per-tool rate limiting (WithRateLimit) — token bucket, fail-fast
• Audit logging (WithAuditLogger)
• Response shaping (WithMaxResponseBytes)

Transports

• stdio (desktop clients) and streamable-HTTP (hosted)
• Auth forwarding (WithForwardHeaders) passes the caller's Bearer/JWT upstream

CLI

• Standalone api2mcp serve binary driven by a YAML config or flags

Verified end-to-end over real MCP JSON-RPC (initialize / tools/list / tools/call) for OpenAPI and all four embedded frameworks.