ApiPostSAFE
ApiPost API management tool based on MCP (Model Context Protocol), supporting complete interface documentation management and team collaboration. Features intelligent search, batch operations, and security management.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
基于 MCP 协议和 ApiPost 官方 OpenAPI 实现的 API 管理工具。
功能
- 连接测试 - 一键验证MCP服务器状态和配置
- 工作空间管理 - 查看、切换团队和项目工作空间
- 目录管理 - 创建API文档目录,支持层级结构
- API接口管理 - 创建、查看、修改、删除接口文档
- 增量更新 - 支持字段级别的精确更新和删除
- 层级搜索 - 强化的目录层级搜索和父子关系定位
- 递归浏览 - 递归搜索子目录,支持深度限制
- 多维筛选 - 多维度搜索和批量操作
- 结构化显示 - 树形结构和分组显示
- 路径导航 - 完整路径显示,快速定位
- 权限管理 - 多种安全模式,灵活的操作权限控制
安装
环境要求
在开始安装之前,请确保您的系统已安装以下环境:
环境安装指南
Node.js 安装:
- 访问 Node.js 官网 下载 LTS 版本
- 或使用包管理器:
# macOS (使用 Homebrew) sudo brew install node # Ubuntu/Debian sudo apt update && sudo apt install nodejs npm # CentOS/RHEL sudo yum install nodejs npm
验证安装:
node --version # 应显示 v18.0.0 或更高版本 npm --version # 应显示 8.0.0 或更高版本
开始安装
git clone https://github.com/jlcodes99/apipost-mcp.git cd apipost-mcp npm install && npm run build
配置
在 MCP 配置文件中添加:
{
"mcpServers": {
"apipost": {
"command": "node",
"args": ["/absolute/path/to/apipost-mcp/dist/index.js"],
"env": {
"APIPOST_TOKEN": "your_access_token_here",
"APIPOST_HOST": "https://open.apipost.net",
"APIPOST_SECURITY_MODE": "limited",
"APIPOST_DEFAULT_TEAM_NAME": "你的团队名称",
"APIPOST_DEFAULT_PROJECT_NAME": "你的项目名称",
"APIPOST_URL_PREFIX": "接口前缀可定义常量比如{{host}}"
}
}
}
}
环境变量
安全模式说明
d4aa014e9effOBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add apipost-mcp --env APIPOST_TOKEN=${APIPOST_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"apipost-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"APIPOST_TOKEN": "${APIPOST_TOKEN}"
}
}
}
}Exposed tools (8)
4 read · 3 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
apipost_create_folder | write | 创建API文档目录,支持在指定父目录下创建新的文件夹 |
apipost_delete | destructive | 批量删除API接口文档,支持单个或多个接口删除。删除前先用apipost_list查看接口列表获取ID |
apipost_detail | read | 查看API接口的详细配置信息,包括完整的请求参数、响应格式、认证设置等。 |
apipost_list | read | 查看项目API列表,支持强化的目录层级搜索和父子关系定位 |
apipost_smart_create | write | API接口文档生成器(字段列表驱动)。规则:responses 只传 fields,不传 data;headers/query/body/cookies 统一用字段列表,嵌套用 .,数组用 [];example 填真实值(不要 JSON 字符串);所有字段含父级都必须写 desc,父级需显式声明。例如:{ |
apipost_test_connection | read | 测试ApiPost MCP连接状态和配置信息,验证服务可用性 |
apipost_update | write | 修改API接口文档。规则同创建:responses 只用 fields(必填),不要传 data;headers/query/body/cookies 统一用字段列表,嵌套用 .,数组用 [],example 填真实值;所有字段含父级必须写 desc,父级需显式声明。例如:{ |
apipost_workspace | read | 工作空间管理:查看当前工作空间、列出团队和项目、切换工作空间 |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- UNDECLARED (1 observation(s))
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
apipost_delete
@modelcontextprotocol/sdk, axios, zod, @types/node, tsx, typescript
Gates applied: no_behavioural_pass.
d4aa014e9efffull audit observations/trust-audit/mcp-server/jlcodes99__apipost.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | d4aa014e9eff | SAFE | B | 89 | first audit |
Questions
What is the ApiPost MCP server?
ApiPost API management tool based on MCP (Model Context Protocol), supporting complete interface documentation management and team collaboration. Features intelligent search, batch operations, and security management.
What tools does ApiPost expose?
8 in total: 4 read-only, 3 that write, and 1 that can delete or overwrite (apipost_delete). Every one is listed on this page with its risk.
Is ApiPost safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does ApiPost need?
It reads APIPOST_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does ApiPost run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as apipost-mcp at 1.2.0.
How current is this page?
The grade is for one exact copy of the source (d4aa014e9eff), read on 2026-10-08. The repository is watched and re-audited when it changes.