npx skills add ...
npx skills add speakeasy-api/sdk-generation-skills --skill generate-mcp-server
Use when generating an MCP server from an OpenAPI spec with Speakeasy. Triggers on "generate MCP server", "MCP server", "Model Context Protocol", "AI assistant tools", "Claude tools", "speakeasy MCP", "mcp-typescript
npx skills add speakeasy-api/sdk-generation-skills --skill generate-mcp-server
Generate a Model Context Protocol (MCP) server from an OpenAPI spec using Speakeasy. The MCP server exposes API operations as tools that AI assistants like Claude can call directly.
| Input | Required | Description |
|---|---|---|
| OpenAPI spec | Yes | Path or URL to the OpenAPI specification |
| Package name | Yes | npm package name for the MCP server (e.g., my-api-mcp) |
| Auth method | Yes | How the API authenticates (bearer token, API key, etc.) |
| Env var prefix | No | Prefix for environment variables (e.g., MYAPI) |
| Scope strategy | No | How to map operations to scopes (default: read/write by HTTP method) |
| Output | Description |
|---|---|
| MCP server | TypeScript MCP server with one tool per API operation |
| CLI entry point | Command-line interface with stdio and SSE transports |
| Scope definitions | Scope-based access control for filtering tools |
| Docker support | Dockerfile and compose config for containerized deployment |
| Workflow config | .speakeasy/workflow.yaml configured for MCP generation |
Node.js 20+ installed (for the generated MCP server).
A valid OpenAPI spec (3.0 or 3.1). Validate first:
Run speakeasy auth login to authenticate interactively, or set the SPEAKEASY_API_KEY environment variable.
The generation uses speakeasy run after configuring the workflow, overlays, and gen.yaml. There is no single command -- follow the step-by-step workflow below.
Create mcp-scopes-overlay.yaml in the project root. This controls which API operations become MCP tools and what scopes they require:
Create .speakeasy/workflow.yaml:
Replace ./openapi.yaml with the actual spec path or URL.
Important: Use the standalone
mcp-typescripttarget, nottypescriptwithenableMCPServer: true. The embedded approach (enableMCPServerflag) is deprecated.
Create .speakeasy/gen.yaml:
Key settings:
target: mcp-typescript in workflow.yaml -- this is what triggers MCP server generationpackageName -- the npm package name users will npxenvVarPrefix -- prefix for auto-generated env var namesFor AI-friendly output:
| Flag | Description | Default |
|---|---|---|
--transport | Transport type: stdio or sse | stdio |
--port | Port for SSE transport | 2718 |
--bearer-auth | API authentication token | Required |
--server-url | Override API base URL | From spec |
--scope | Filter by scope (repeatable) | All scopes |
--tool | Mount specific tools (repeatable) | All tools |
--log-level | Logging level | info |
Add to claude_desktop_config.json:
Add to .claude/settings.json or use claude mcp add:
For production, use SSE transport with Docker:
The generated project includes a Dockerfile and docker-compose.yaml.
Full example generating an MCP server for a pet store API:
The generated project contains:
src/mcp-server/server.ts -- Main MCP server factorysrc/mcp-server/tools/ -- One tool per API operationsrc/mcp-server/mcp-server.ts -- CLI entry pointsrc/mcp-server/scopes.ts -- Scope definitions--scope and --tool flags to limit what is exposedx-speakeasy-mcp -- use overlays insteadenableMCPServer: true flag in gen.yaml -- use the standalone mcp-typescript target in workflow.yaml insteadSymptom: npx my-api-mcp mcp start errors immediately.
Cause: Missing or invalid authentication flags.
Fix:
Symptom: MCP server starts but AI assistant shows no tools.
Cause: Missing x-speakeasy-mcp extensions or all operations disabled.
Fix: Verify the scopes overlay is listed in workflow.yaml under overlays: and that operations have disabled: false.
Symptom: speakeasy run fails when using target: mcp-typescript.
Cause: Usually a spec validation issue, missing workflow config, or using the deprecated enableMCPServer flag instead of the mcp-typescript target.
Fix:
Symptom: Some API operations are not available as MCP tools.
Cause: Operations not targeted by the scopes overlay or explicitly disabled.
Fix: Review mcp-scopes-overlay.yaml target selectors. Ensure paths and methods match your spec.
# After all config files are in place:
speakeasy run# mcp-scopes-overlay.yaml
openapi: 3.1.0
overlay: 1.0.0
info:
title: Add MCP scopes
version: 0.0.0
actions:
# Enable read operations
- target: $.paths.*["get","head"]
update:
x-speakeasy-mcp:
scopes: [read]
disabled: false
# Enable write operations
- target: $.paths.*["post","put","delete","patch"]
update:
x-speakeasy-mcp:
scopes: [write]
disabled: false
# Disable specific sensitive endpoints (customize as needed)
# - target: $.paths["/admin/danger-zone"]["delete"]
# update:
# x-speakeasy-mcp:
# disabled: true# .speakeasy/workflow.yaml
workflowVersion: 1.0.0
speakeasyVersion: latest
sources:
My-API:
inputs:
- location: ./openapi.yaml
overlays:
- location: mcp-scopes-overlay.yaml
output: openapi.yaml
targets:
mcp-server:
target: mcp-typescript
source: My-API# .speakeasy/gen.yaml
configVersion: 2.0.0
generation:
sdkClassName: MyApiMcp
maintainOpenAPIOrder: true
devContainers:
enabled: true
schemaPath: ./openapi.yaml
typescript:
version: 1.0.0
packageName: my-api-mcp
envVarPrefix: MYAPIspeakeasy runspeakeasy run --output console 2>&1 | tail -50# Start with stdio transport (default, for local AI assistants)
npx my-api-mcp mcp start --bearer-auth "YOUR_TOKEN"
# Start with SSE transport (for networked deployment)
npx my-api-mcp mcp start --transport sse --port 3000 --bearer-auth "YOUR_TOKEN"
# Filter by scope (only expose read operations)
npx my-api-mcp mcp start --scope read --bearer-auth "YOUR_TOKEN"
# Mount specific tools only
npx my-api-mcp mcp start --tool users-get-users --tool users-create-user --bearer-auth "YOUR_TOKEN"{
"mcpServers": {
"my-api": {
"command": "npx",
"args": [
"-y", "--package", "my-api-mcp",
"--",
"mcp", "start",
"--bearer-auth", "<API_TOKEN>"
]
}
}
}{
"mcpServers": {
"my-api": {
"command": "npx",
"args": [
"-y", "--package", "my-api-mcp",
"--",
"mcp", "start",
"--bearer-auth", "<API_TOKEN>"
]
}
}
}# Build and run
docker-compose up -d
# Configure MCP client to use SSE endpoint
# "url": "http://localhost:32000/sse"# 1. Validate the spec
speakeasy lint openapi --non-interactive -s ./petstore.yaml
# 2. Create scopes overlay
cat > mcp-scopes-overlay.yaml << 'EOF'
openapi: 3.1.0
overlay: 1.0.0
info:
title: Add MCP scopes
version: 0.0.0
actions:
- target: $.paths.*["get","head"]
update:
x-speakeasy-mcp:
scopes: [read]
disabled: false
- target: $.paths.*["post","put","delete","patch"]
update:
x-speakeasy-mcp:
scopes: [write]
disabled: false
EOF
# 3. Create workflow (assumes .speakeasy/ dir exists)
mkdir -p .speakeasy
cat > .speakeasy/workflow.yaml << 'EOF'
workflowVersion: 1.0.0
speakeasyVersion: latest
sources:
petstore:
inputs:
- location: ./petstore.yaml
overlays:
- location: mcp-scopes-overlay.yaml
output: openapi.yaml
targets:
mcp-server:
target: mcp-typescript
source: petstore
EOF
# 4. Create gen.yaml
cat > .speakeasy/gen.yaml << 'EOF'
configVersion: 2.0.0
generation:
sdkClassName: PetStoreMcp
maintainOpenAPIOrder: true
typescript:
version: 1.0.0
packageName: petstore-mcp
envVarPrefix: PETSTORE
EOF
# 5. Generate
speakeasy run
# 6. Test locally
npx petstore-mcp mcp start --bearer-auth "test-token"Workflow completed successfully.
Generated TypeScript MCP server in ./# Ensure auth flag matches your API's auth scheme
npx my-api-mcp mcp start --bearer-auth "YOUR_TOKEN"
# Check --help for available auth flags
npx my-api-mcp mcp start --help# Validate spec first
speakeasy lint openapi --non-interactive -s ./openapi.yaml
# Ensure workflow.yaml uses target: mcp-typescript (NOT target: typescript with enableMCPServer)
cat .speakeasy/workflow.yaml
# Remove enableMCPServer from gen.yaml if present -- it is deprecated