@ivotoby/openapi-mcp-server 1.8.0 → 1.8.2

package/dist/bundle.js

@@ -14989,6 +14989,19 @@ var ToolsManager = class {
   }
   tools = /* @__PURE__ */ new Map();
   specLoader;
+  loadedSpec;
+  /**
+   * Get the OpenAPI spec loader instance
+   */
+  getSpecLoader() {
+    return this.specLoader;
+  }
+  /**
+   * Get the loaded OpenAPI specification
+   */
+  getOpenApiSpec() {
+    return this.loadedSpec;
+  }
   /**
    * Create dynamic discovery meta-tools
    */
@@ -15016,7 +15029,12 @@ var ToolsManager = class {
       inputSchema: {
         type: "object",
         properties: {
-          endpoint: { type: "string", description: "Endpoint path to invoke" },
+          endpoint: { type: "string", description: "Endpoint path to invoke (e.g. /users/{id})" },
+          method: {
+            type: "string",
+            description: "HTTP method to use (optional, e.g. GET, POST, PUT, DELETE)",
+            enum: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS", "HEAD"]
+          },
           params: {
             type: "object",
             description: "Parameters for the API call",
@@ -15037,6 +15055,7 @@ var ToolsManager = class {
       this.config.specInputMethod,
       this.config.inlineSpecContent
     );
+    this.loadedSpec = spec;
     if (this.config.toolsMode === "dynamic") {
       this.tools = this.createDynamicTools();
       return;
@@ -18472,18 +18491,39 @@ var StaticAuthProvider = class {
   }
 };
 
+// src/utils/http-methods.ts
+var VALID_HTTP_METHODS = [
+  "get",
+  "post",
+  "put",
+  "patch",
+  "delete",
+  "options",
+  "head"
+];
+var GET_LIKE_METHODS = ["get", "delete", "head", "options"];
+function isValidHttpMethod(method) {
+  return VALID_HTTP_METHODS.includes(method.toLowerCase());
+}
+function isGetLikeMethod(method) {
+  return GET_LIKE_METHODS.includes(method.toLowerCase());
+}
+
 // src/api-client.ts
 var ApiClient = class {
   axiosInstance;
   toolsMap = /* @__PURE__ */ new Map();
   authProvider;
+  specLoader;
+  openApiSpec;
   /**
    * Create a new API client
    *
    * @param baseUrl - Base URL for the API
    * @param authProviderOrHeaders - AuthProvider instance or static headers for backward compatibility
+   * @param specLoader - Optional OpenAPI spec loader for dynamic meta-tools
    */
-  constructor(baseUrl, authProviderOrHeaders) {
+  constructor(baseUrl, authProviderOrHeaders, specLoader) {
     this.axiosInstance = axios_default.create({
       baseURL: baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`
     });
@@ -18494,6 +18534,7 @@ var ApiClient = class {
     } else {
       this.authProvider = authProviderOrHeaders;
     }
+    this.specLoader = specLoader;
   }
   /**
    * Set the available tools for the client
@@ -18503,6 +18544,14 @@ var ApiClient = class {
   setTools(tools) {
     this.toolsMap = tools;
   }
+  /**
+   * Set the OpenAPI specification for dynamic meta-tools
+   *
+   * @param spec - The OpenAPI specification document
+   */
+  setOpenApiSpec(spec) {
+    this.openApiSpec = spec;
+  }
   /**
    * Get a tool definition by ID
    *
@@ -18532,6 +18581,15 @@ var ApiClient = class {
    */
   async executeApiCallWithRetry(toolId, params, isRetry) {
     try {
+      if (toolId === "LIST-API-ENDPOINTS") {
+        return await this.handleListApiEndpoints();
+      }
+      if (toolId === "GET-API-ENDPOINT-SCHEMA") {
+        return this.handleGetApiEndpointSchema(toolId, params);
+      }
+      if (toolId === "INVOKE-API-ENDPOINT") {
+        return this.handleInvokeApiEndpoint(toolId, params);
+      }
       const { method, path } = this.parseToolId(toolId);
       const toolDef = this.getToolDefinition(toolId);
       const paramsCopy = { ...params };
@@ -18581,7 +18639,7 @@ var ApiClient = class {
         url: resolvedPath,
         headers: authHeaders
       };
-      if (["get", "delete", "head", "options"].includes(method.toLowerCase())) {
+      if (isGetLikeMethod(method)) {
         config.params = this.processQueryParams(paramsCopy);
       } else {
         config.data = paramsCopy;
@@ -18631,6 +18689,194 @@ var ApiClient = class {
     }
     return result;
   }
+  /**
+   * Handle the LIST-API-ENDPOINTS meta-tool
+   * Returns a list of all available API endpoints from the loaded tools
+   */
+  async handleListApiEndpoints() {
+    const endpoints = [];
+    if (this.openApiSpec) {
+      for (const [path, pathItem] of Object.entries(this.openApiSpec.paths)) {
+        if (!pathItem) continue;
+        for (const [method, operation] of Object.entries(pathItem)) {
+          if (method === "parameters" || !operation) continue;
+          if (!isValidHttpMethod(method)) {
+            continue;
+          }
+          const op = operation;
+          endpoints.push({
+            method: method.toUpperCase(),
+            path,
+            summary: op.summary || "",
+            description: op.description || "",
+            operationId: op.operationId || "",
+            tags: op.tags || []
+          });
+        }
+      }
+    } else {
+      for (const [toolId, tool] of this.toolsMap.entries()) {
+        if (toolId.startsWith("LIST-API-ENDPOINTS") || toolId.startsWith("GET-API-ENDPOINT-SCHEMA") || toolId.startsWith("INVOKE-API-ENDPOINT")) {
+          continue;
+        }
+        try {
+          const { method, path } = this.parseToolId(toolId);
+          endpoints.push({
+            toolId,
+            name: tool.name,
+            description: tool.description,
+            method: method.toUpperCase(),
+            path
+          });
+        } catch (error) {
+          continue;
+        }
+      }
+    }
+    return {
+      endpoints,
+      total: endpoints.length,
+      note: this.openApiSpec ? "Use INVOKE-API-ENDPOINT to call specific endpoints with the path parameter" : "Limited endpoint information - OpenAPI spec not available"
+    };
+  }
+  /**
+   * Handle the GET-API-ENDPOINT-SCHEMA meta-tool
+   * Returns the JSON schema for a specified API endpoint
+   */
+  handleGetApiEndpointSchema(toolId, params) {
+    const { endpoint } = params;
+    if (!endpoint) {
+      throw new Error(`Missing required parameter 'endpoint' for tool '${toolId}'`);
+    }
+    if (this.openApiSpec) {
+      const pathItem = this.openApiSpec.paths[endpoint];
+      if (!pathItem) {
+        throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+      }
+      const operations = [];
+      for (const [method, operation] of Object.entries(pathItem)) {
+        if (method === "parameters" || !operation) continue;
+        if (!isValidHttpMethod(method)) {
+          continue;
+        }
+        const op = operation;
+        operations.push({
+          method: method.toUpperCase(),
+          operationId: op.operationId || "",
+          summary: op.summary || "",
+          description: op.description || "",
+          parameters: op.parameters || [],
+          requestBody: op.requestBody || null,
+          responses: op.responses || {},
+          tags: op.tags || []
+        });
+      }
+      if (operations.length === 0) {
+        throw new Error(`No valid HTTP operations found for path '${endpoint}' in tool '${toolId}'`);
+      }
+      return {
+        path: endpoint,
+        operations,
+        pathParameters: pathItem.parameters || []
+      };
+    } else {
+      let matchingTool;
+      let matchingToolId;
+      for (const [toolId2, tool] of this.toolsMap.entries()) {
+        try {
+          const { path } = this.parseToolId(toolId2);
+          if (path === endpoint) {
+            matchingTool = tool;
+            matchingToolId = toolId2;
+            break;
+          }
+        } catch (error) {
+          continue;
+        }
+      }
+      if (!matchingTool || !matchingToolId) {
+        throw new Error(`No endpoint found for path: ${endpoint}`);
+      }
+      return {
+        toolId: matchingToolId,
+        name: matchingTool.name,
+        description: matchingTool.description,
+        inputSchema: matchingTool.inputSchema,
+        note: "Limited schema information - using tool definition instead of OpenAPI spec"
+      };
+    }
+  }
+  /**
+   * Handle the INVOKE-API-ENDPOINT meta-tool
+   * Dynamically invokes an API endpoint with the provided parameters
+   */
+  async handleInvokeApiEndpoint(toolId, params) {
+    const { endpoint, method, params: endpointParams = {} } = params;
+    if (!endpoint) {
+      throw new Error(`Missing required parameter 'endpoint' for tool '${toolId}'`);
+    }
+    if (method) {
+      const toolId2 = generateToolId(method, endpoint);
+      if (this.toolsMap.has(toolId2)) {
+        return this.executeApiCall(toolId2, endpointParams);
+      } else if (this.openApiSpec) {
+        const pathItem = this.openApiSpec.paths[endpoint];
+        if (pathItem && pathItem[method.toLowerCase()]) {
+          const { method: httpMethod, path } = { method: method.toUpperCase(), path: endpoint };
+          return this.makeDirectHttpRequest(httpMethod, path, endpointParams);
+        } else {
+          throw new Error(
+            `No endpoint found for path '${endpoint}' with method '${method}' in tool '${toolId2}'`
+          );
+        }
+      } else {
+        throw new Error(`Tool not found: ${toolId2}`);
+      }
+    }
+    if (this.openApiSpec) {
+      const pathItem = this.openApiSpec.paths[endpoint];
+      if (pathItem) {
+        for (const method2 of VALID_HTTP_METHODS) {
+          if (pathItem[method2]) {
+            return this.makeDirectHttpRequest(method2.toUpperCase(), endpoint, endpointParams);
+          }
+        }
+        throw new Error(`No HTTP operations found for endpoint '${endpoint}' in tool '${toolId}'`);
+      } else {
+        throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+      }
+    }
+    throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+  }
+  /**
+   * Make a direct HTTP request without going through the tool system
+   * Used by dynamic meta-tools when we have OpenAPI spec but no corresponding tool
+   */
+  async makeDirectHttpRequest(method, path, params) {
+    const authHeaders = await this.authProvider.getAuthHeaders();
+    const config = {
+      method: method.toLowerCase(),
+      url: path,
+      headers: authHeaders
+    };
+    if (isGetLikeMethod(method)) {
+      config.params = this.processQueryParams(params);
+    } else {
+      config.data = params;
+    }
+    try {
+      const response = await this.axiosInstance.request(config);
+      return response.data;
+    } catch (error) {
+      if (axios_default.isAxiosError(error)) {
+        const axiosError = error;
+        throw new Error(
+          `API request failed: ${axiosError.message}${axiosError.response ? ` (${axiosError.response.status}: ${typeof axiosError.response.data === "object" ? JSON.stringify(axiosError.response.data) : axiosError.response.data})` : ""}`
+        );
+      }
+      throw error;
+    }
+  }
 };
 
 // src/server.ts
@@ -18652,7 +18898,11 @@ var OpenAPIServer = class {
     );
     this.toolsManager = new ToolsManager(config);
     const authProviderOrHeaders = config.authProvider || new StaticAuthProvider(config.headers);
-    this.apiClient = new ApiClient(config.apiBaseUrl, authProviderOrHeaders);
+    this.apiClient = new ApiClient(
+      config.apiBaseUrl,
+      authProviderOrHeaders,
+      this.toolsManager.getSpecLoader()
+    );
     this.initializeHandlers();
   }
   /**
@@ -18717,6 +18967,10 @@ var OpenAPIServer = class {
       toolsMap.set(toolId, tool);
     }
     this.apiClient.setTools(toolsMap);
+    const spec = this.toolsManager.getOpenApiSpec();
+    if (spec) {
+      this.apiClient.setOpenApiSpec(spec);
+    }
     await this.server.connect(transport);
   }
 };
@@ -23575,8 +23829,12 @@ function parseHeaders(headerStr) {
   const headers = {};
   if (headerStr) {
     headerStr.split(",").forEach((header) => {
-      const [key, value] = header.split(":");
-      if (key && value) headers[key.trim()] = value.trim();
+      const colonIndex = header.indexOf(":");
+      if (colonIndex > 0) {
+        const key = header.substring(0, colonIndex).trim();
+        const value = header.substring(colonIndex + 1).trim();
+        if (key) headers[key] = value;
+      }
     });
   }
   return headers;

package/dist/cli.js

@@ -14989,6 +14989,19 @@ var ToolsManager = class {
   }
   tools = /* @__PURE__ */ new Map();
   specLoader;
+  loadedSpec;
+  /**
+   * Get the OpenAPI spec loader instance
+   */
+  getSpecLoader() {
+    return this.specLoader;
+  }
+  /**
+   * Get the loaded OpenAPI specification
+   */
+  getOpenApiSpec() {
+    return this.loadedSpec;
+  }
   /**
    * Create dynamic discovery meta-tools
    */
@@ -15016,7 +15029,12 @@ var ToolsManager = class {
       inputSchema: {
         type: "object",
         properties: {
-          endpoint: { type: "string", description: "Endpoint path to invoke" },
+          endpoint: { type: "string", description: "Endpoint path to invoke (e.g. /users/{id})" },
+          method: {
+            type: "string",
+            description: "HTTP method to use (optional, e.g. GET, POST, PUT, DELETE)",
+            enum: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS", "HEAD"]
+          },
           params: {
             type: "object",
             description: "Parameters for the API call",
@@ -15037,6 +15055,7 @@ var ToolsManager = class {
       this.config.specInputMethod,
       this.config.inlineSpecContent
     );
+    this.loadedSpec = spec;
     if (this.config.toolsMode === "dynamic") {
       this.tools = this.createDynamicTools();
       return;
@@ -18472,18 +18491,39 @@ var StaticAuthProvider = class {
   }
 };
 
+// src/utils/http-methods.ts
+var VALID_HTTP_METHODS = [
+  "get",
+  "post",
+  "put",
+  "patch",
+  "delete",
+  "options",
+  "head"
+];
+var GET_LIKE_METHODS = ["get", "delete", "head", "options"];
+function isValidHttpMethod(method) {
+  return VALID_HTTP_METHODS.includes(method.toLowerCase());
+}
+function isGetLikeMethod(method) {
+  return GET_LIKE_METHODS.includes(method.toLowerCase());
+}
+
 // src/api-client.ts
 var ApiClient = class {
   axiosInstance;
   toolsMap = /* @__PURE__ */ new Map();
   authProvider;
+  specLoader;
+  openApiSpec;
   /**
    * Create a new API client
    *
    * @param baseUrl - Base URL for the API
    * @param authProviderOrHeaders - AuthProvider instance or static headers for backward compatibility
+   * @param specLoader - Optional OpenAPI spec loader for dynamic meta-tools
    */
-  constructor(baseUrl, authProviderOrHeaders) {
+  constructor(baseUrl, authProviderOrHeaders, specLoader) {
     this.axiosInstance = axios_default.create({
       baseURL: baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`
     });
@@ -18494,6 +18534,7 @@ var ApiClient = class {
     } else {
       this.authProvider = authProviderOrHeaders;
     }
+    this.specLoader = specLoader;
   }
   /**
    * Set the available tools for the client
@@ -18503,6 +18544,14 @@ var ApiClient = class {
   setTools(tools) {
     this.toolsMap = tools;
   }
+  /**
+   * Set the OpenAPI specification for dynamic meta-tools
+   *
+   * @param spec - The OpenAPI specification document
+   */
+  setOpenApiSpec(spec) {
+    this.openApiSpec = spec;
+  }
   /**
    * Get a tool definition by ID
    *
@@ -18532,6 +18581,15 @@ var ApiClient = class {
    */
   async executeApiCallWithRetry(toolId, params, isRetry) {
     try {
+      if (toolId === "LIST-API-ENDPOINTS") {
+        return await this.handleListApiEndpoints();
+      }
+      if (toolId === "GET-API-ENDPOINT-SCHEMA") {
+        return this.handleGetApiEndpointSchema(toolId, params);
+      }
+      if (toolId === "INVOKE-API-ENDPOINT") {
+        return this.handleInvokeApiEndpoint(toolId, params);
+      }
       const { method, path } = this.parseToolId(toolId);
       const toolDef = this.getToolDefinition(toolId);
       const paramsCopy = { ...params };
@@ -18581,7 +18639,7 @@ var ApiClient = class {
         url: resolvedPath,
         headers: authHeaders
       };
-      if (["get", "delete", "head", "options"].includes(method.toLowerCase())) {
+      if (isGetLikeMethod(method)) {
         config.params = this.processQueryParams(paramsCopy);
       } else {
         config.data = paramsCopy;
@@ -18631,6 +18689,194 @@ var ApiClient = class {
     }
     return result;
   }
+  /**
+   * Handle the LIST-API-ENDPOINTS meta-tool
+   * Returns a list of all available API endpoints from the loaded tools
+   */
+  async handleListApiEndpoints() {
+    const endpoints = [];
+    if (this.openApiSpec) {
+      for (const [path, pathItem] of Object.entries(this.openApiSpec.paths)) {
+        if (!pathItem) continue;
+        for (const [method, operation] of Object.entries(pathItem)) {
+          if (method === "parameters" || !operation) continue;
+          if (!isValidHttpMethod(method)) {
+            continue;
+          }
+          const op = operation;
+          endpoints.push({
+            method: method.toUpperCase(),
+            path,
+            summary: op.summary || "",
+            description: op.description || "",
+            operationId: op.operationId || "",
+            tags: op.tags || []
+          });
+        }
+      }
+    } else {
+      for (const [toolId, tool] of this.toolsMap.entries()) {
+        if (toolId.startsWith("LIST-API-ENDPOINTS") || toolId.startsWith("GET-API-ENDPOINT-SCHEMA") || toolId.startsWith("INVOKE-API-ENDPOINT")) {
+          continue;
+        }
+        try {
+          const { method, path } = this.parseToolId(toolId);
+          endpoints.push({
+            toolId,
+            name: tool.name,
+            description: tool.description,
+            method: method.toUpperCase(),
+            path
+          });
+        } catch (error) {
+          continue;
+        }
+      }
+    }
+    return {
+      endpoints,
+      total: endpoints.length,
+      note: this.openApiSpec ? "Use INVOKE-API-ENDPOINT to call specific endpoints with the path parameter" : "Limited endpoint information - OpenAPI spec not available"
+    };
+  }
+  /**
+   * Handle the GET-API-ENDPOINT-SCHEMA meta-tool
+   * Returns the JSON schema for a specified API endpoint
+   */
+  handleGetApiEndpointSchema(toolId, params) {
+    const { endpoint } = params;
+    if (!endpoint) {
+      throw new Error(`Missing required parameter 'endpoint' for tool '${toolId}'`);
+    }
+    if (this.openApiSpec) {
+      const pathItem = this.openApiSpec.paths[endpoint];
+      if (!pathItem) {
+        throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+      }
+      const operations = [];
+      for (const [method, operation] of Object.entries(pathItem)) {
+        if (method === "parameters" || !operation) continue;
+        if (!isValidHttpMethod(method)) {
+          continue;
+        }
+        const op = operation;
+        operations.push({
+          method: method.toUpperCase(),
+          operationId: op.operationId || "",
+          summary: op.summary || "",
+          description: op.description || "",
+          parameters: op.parameters || [],
+          requestBody: op.requestBody || null,
+          responses: op.responses || {},
+          tags: op.tags || []
+        });
+      }
+      if (operations.length === 0) {
+        throw new Error(`No valid HTTP operations found for path '${endpoint}' in tool '${toolId}'`);
+      }
+      return {
+        path: endpoint,
+        operations,
+        pathParameters: pathItem.parameters || []
+      };
+    } else {
+      let matchingTool;
+      let matchingToolId;
+      for (const [toolId2, tool] of this.toolsMap.entries()) {
+        try {
+          const { path } = this.parseToolId(toolId2);
+          if (path === endpoint) {
+            matchingTool = tool;
+            matchingToolId = toolId2;
+            break;
+          }
+        } catch (error) {
+          continue;
+        }
+      }
+      if (!matchingTool || !matchingToolId) {
+        throw new Error(`No endpoint found for path: ${endpoint}`);
+      }
+      return {
+        toolId: matchingToolId,
+        name: matchingTool.name,
+        description: matchingTool.description,
+        inputSchema: matchingTool.inputSchema,
+        note: "Limited schema information - using tool definition instead of OpenAPI spec"
+      };
+    }
+  }
+  /**
+   * Handle the INVOKE-API-ENDPOINT meta-tool
+   * Dynamically invokes an API endpoint with the provided parameters
+   */
+  async handleInvokeApiEndpoint(toolId, params) {
+    const { endpoint, method, params: endpointParams = {} } = params;
+    if (!endpoint) {
+      throw new Error(`Missing required parameter 'endpoint' for tool '${toolId}'`);
+    }
+    if (method) {
+      const toolId2 = generateToolId(method, endpoint);
+      if (this.toolsMap.has(toolId2)) {
+        return this.executeApiCall(toolId2, endpointParams);
+      } else if (this.openApiSpec) {
+        const pathItem = this.openApiSpec.paths[endpoint];
+        if (pathItem && pathItem[method.toLowerCase()]) {
+          const { method: httpMethod, path } = { method: method.toUpperCase(), path: endpoint };
+          return this.makeDirectHttpRequest(httpMethod, path, endpointParams);
+        } else {
+          throw new Error(
+            `No endpoint found for path '${endpoint}' with method '${method}' in tool '${toolId2}'`
+          );
+        }
+      } else {
+        throw new Error(`Tool not found: ${toolId2}`);
+      }
+    }
+    if (this.openApiSpec) {
+      const pathItem = this.openApiSpec.paths[endpoint];
+      if (pathItem) {
+        for (const method2 of VALID_HTTP_METHODS) {
+          if (pathItem[method2]) {
+            return this.makeDirectHttpRequest(method2.toUpperCase(), endpoint, endpointParams);
+          }
+        }
+        throw new Error(`No HTTP operations found for endpoint '${endpoint}' in tool '${toolId}'`);
+      } else {
+        throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+      }
+    }
+    throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+  }
+  /**
+   * Make a direct HTTP request without going through the tool system
+   * Used by dynamic meta-tools when we have OpenAPI spec but no corresponding tool
+   */
+  async makeDirectHttpRequest(method, path, params) {
+    const authHeaders = await this.authProvider.getAuthHeaders();
+    const config = {
+      method: method.toLowerCase(),
+      url: path,
+      headers: authHeaders
+    };
+    if (isGetLikeMethod(method)) {
+      config.params = this.processQueryParams(params);
+    } else {
+      config.data = params;
+    }
+    try {
+      const response = await this.axiosInstance.request(config);
+      return response.data;
+    } catch (error) {
+      if (axios_default.isAxiosError(error)) {
+        const axiosError = error;
+        throw new Error(
+          `API request failed: ${axiosError.message}${axiosError.response ? ` (${axiosError.response.status}: ${typeof axiosError.response.data === "object" ? JSON.stringify(axiosError.response.data) : axiosError.response.data})` : ""}`
+        );
+      }
+      throw error;
+    }
+  }
 };
 
 // src/server.ts
@@ -18652,7 +18898,11 @@ var OpenAPIServer = class {
     );
     this.toolsManager = new ToolsManager(config);
     const authProviderOrHeaders = config.authProvider || new StaticAuthProvider(config.headers);
-    this.apiClient = new ApiClient(config.apiBaseUrl, authProviderOrHeaders);
+    this.apiClient = new ApiClient(
+      config.apiBaseUrl,
+      authProviderOrHeaders,
+      this.toolsManager.getSpecLoader()
+    );
     this.initializeHandlers();
   }
   /**
@@ -18717,6 +18967,10 @@ var OpenAPIServer = class {
       toolsMap.set(toolId, tool);
     }
     this.apiClient.setTools(toolsMap);
+    const spec = this.toolsManager.getOpenApiSpec();
+    if (spec) {
+      this.apiClient.setOpenApiSpec(spec);
+    }
     await this.server.connect(transport);
   }
 };
@@ -23575,8 +23829,12 @@ function parseHeaders(headerStr) {
   const headers = {};
   if (headerStr) {
     headerStr.split(",").forEach((header) => {
-      const [key, value] = header.split(":");
-      if (key && value) headers[key.trim()] = value.trim();
+      const colonIndex = header.indexOf(":");
+      if (colonIndex > 0) {
+        const key = header.substring(0, colonIndex).trim();
+        const value = header.substring(colonIndex + 1).trim();
+        if (key) headers[key] = value;
+      }
     });
   }
   return headers;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ivotoby/openapi-mcp-server",
-  "version": "1.8.0",
+  "version": "1.8.2",
   "description": "An MCP server that exposes OpenAPI endpoints as resources",
   "license": "MIT",
   "type": "module",