@ivotoby/openapi-mcp-server 1.8.1 → 1.8.3

package/dist/bundle.js

@@ -14381,10 +14381,15 @@ function parseToolId(toolId) {
   return { method, path: "/" + path };
 }
 function sanitizeForToolId(input) {
-  return input.replace(/[^A-Za-z0-9_-]/g, "").replace(/_{3,}/g, "__").replace(/^[_-]+|[_-]+$/g, "");
+  let result = input.replace(/[^A-Za-z0-9_-]/g, "").replace(/_{3,}/g, "__");
+  result = collapseExcessiveHyphens(result);
+  return result.replace(/^[_-]+|[_-]+$/g, "");
+}
+function collapseExcessiveHyphens(input) {
+  return input.replace(/-{4,}/g, "---");
 }
 function generateToolId(method, path) {
-  const cleanPath = path.replace(/^\//, "").replace(/\/+/g, "/").replace(/\{([^}]+)\}/g, "$1").replace(/\//g, "__");
+  const cleanPath = path.replace(/^\//, "").replace(/\/+/g, "/").replace(/\{([^}]+)\}/g, "---$1").replace(/\//g, "__");
   const sanitizedPath = sanitizeForToolId(cleanPath);
   return `${method.toUpperCase()}::${sanitizedPath}`;
 }
@@ -14989,6 +14994,19 @@ var ToolsManager = class {
   }
   tools = /* @__PURE__ */ new Map();
   specLoader;
+  loadedSpec;
+  /**
+   * Get the OpenAPI spec loader instance
+   */
+  getSpecLoader() {
+    return this.specLoader;
+  }
+  /**
+   * Get the loaded OpenAPI specification
+   */
+  getOpenApiSpec() {
+    return this.loadedSpec;
+  }
   /**
    * Create dynamic discovery meta-tools
    */
@@ -15016,7 +15034,12 @@ var ToolsManager = class {
       inputSchema: {
         type: "object",
         properties: {
-          endpoint: { type: "string", description: "Endpoint path to invoke" },
+          endpoint: { type: "string", description: "Endpoint path to invoke (e.g. /users/{id})" },
+          method: {
+            type: "string",
+            description: "HTTP method to use (optional, e.g. GET, POST, PUT, DELETE)",
+            enum: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS", "HEAD"]
+          },
           params: {
             type: "object",
             description: "Parameters for the API call",
@@ -15037,6 +15060,7 @@ var ToolsManager = class {
       this.config.specInputMethod,
       this.config.inlineSpecContent
     );
+    this.loadedSpec = spec;
     if (this.config.toolsMode === "dynamic") {
       this.tools = this.createDynamicTools();
       return;
@@ -18472,18 +18496,39 @@ var StaticAuthProvider = class {
   }
 };
 
+// src/utils/http-methods.ts
+var VALID_HTTP_METHODS = [
+  "get",
+  "post",
+  "put",
+  "patch",
+  "delete",
+  "options",
+  "head"
+];
+var GET_LIKE_METHODS = ["get", "delete", "head", "options"];
+function isValidHttpMethod(method) {
+  return VALID_HTTP_METHODS.includes(method.toLowerCase());
+}
+function isGetLikeMethod(method) {
+  return GET_LIKE_METHODS.includes(method.toLowerCase());
+}
+
 // src/api-client.ts
 var ApiClient = class {
   axiosInstance;
   toolsMap = /* @__PURE__ */ new Map();
   authProvider;
+  specLoader;
+  openApiSpec;
   /**
    * Create a new API client
    *
    * @param baseUrl - Base URL for the API
    * @param authProviderOrHeaders - AuthProvider instance or static headers for backward compatibility
+   * @param specLoader - Optional OpenAPI spec loader for dynamic meta-tools
    */
-  constructor(baseUrl, authProviderOrHeaders) {
+  constructor(baseUrl, authProviderOrHeaders, specLoader) {
     this.axiosInstance = axios_default.create({
       baseURL: baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`
     });
@@ -18494,6 +18539,7 @@ var ApiClient = class {
     } else {
       this.authProvider = authProviderOrHeaders;
     }
+    this.specLoader = specLoader;
   }
   /**
    * Set the available tools for the client
@@ -18503,6 +18549,14 @@ var ApiClient = class {
   setTools(tools) {
     this.toolsMap = tools;
   }
+  /**
+   * Set the OpenAPI specification for dynamic meta-tools
+   *
+   * @param spec - The OpenAPI specification document
+   */
+  setOpenApiSpec(spec) {
+    this.openApiSpec = spec;
+  }
   /**
    * Get a tool definition by ID
    *
@@ -18532,6 +18586,15 @@ var ApiClient = class {
    */
   async executeApiCallWithRetry(toolId, params, isRetry) {
     try {
+      if (toolId === "LIST-API-ENDPOINTS") {
+        return await this.handleListApiEndpoints();
+      }
+      if (toolId === "GET-API-ENDPOINT-SCHEMA") {
+        return this.handleGetApiEndpointSchema(toolId, params);
+      }
+      if (toolId === "INVOKE-API-ENDPOINT") {
+        return this.handleInvokeApiEndpoint(toolId, params);
+      }
       const { method, path } = this.parseToolId(toolId);
       const toolDef = this.getToolDefinition(toolId);
       const paramsCopy = { ...params };
@@ -18546,7 +18609,10 @@ var ApiClient = class {
           const paramLocation = paramDef_any?.["x-parameter-location"];
           if (paramLocation === "path") {
             const escapedKey = escapeRegExp(key);
-            const paramRegex = new RegExp(`\\{${escapedKey}\\}|:${escapedKey}(?:\\/|$)`, "g");
+            const paramRegex = new RegExp(
+              `\\{${escapedKey}\\}|:${escapedKey}(?:\\/|$)|---${escapedKey}(?=__|/|$)`,
+              "g"
+            );
             if (paramRegex.test(resolvedPath)) {
               resolvedPath = resolvedPath.replace(
                 paramRegex,
@@ -18562,7 +18628,10 @@ var ApiClient = class {
         for (const key of Object.keys(paramsCopy)) {
           const value = paramsCopy[key];
           const escapedKey = escapeRegExp(key);
-          const paramRegex = new RegExp(`\\{${escapedKey}\\}|:${escapedKey}(?:\\/|$)`, "g");
+          const paramRegex = new RegExp(
+            `\\{${escapedKey}\\}|:${escapedKey}(?:\\/|$)|---${escapedKey}(?=__|/|$)`,
+            "g"
+          );
           if (paramRegex.test(resolvedPath)) {
             resolvedPath = resolvedPath.replace(
               paramRegex,
@@ -18581,7 +18650,7 @@ var ApiClient = class {
         url: resolvedPath,
         headers: authHeaders
       };
-      if (["get", "delete", "head", "options"].includes(method.toLowerCase())) {
+      if (isGetLikeMethod(method)) {
         config.params = this.processQueryParams(paramsCopy);
       } else {
         config.data = paramsCopy;
@@ -18631,6 +18700,194 @@ var ApiClient = class {
     }
     return result;
   }
+  /**
+   * Handle the LIST-API-ENDPOINTS meta-tool
+   * Returns a list of all available API endpoints from the loaded tools
+   */
+  async handleListApiEndpoints() {
+    const endpoints = [];
+    if (this.openApiSpec) {
+      for (const [path, pathItem] of Object.entries(this.openApiSpec.paths)) {
+        if (!pathItem) continue;
+        for (const [method, operation] of Object.entries(pathItem)) {
+          if (method === "parameters" || !operation) continue;
+          if (!isValidHttpMethod(method)) {
+            continue;
+          }
+          const op = operation;
+          endpoints.push({
+            method: method.toUpperCase(),
+            path,
+            summary: op.summary || "",
+            description: op.description || "",
+            operationId: op.operationId || "",
+            tags: op.tags || []
+          });
+        }
+      }
+    } else {
+      for (const [toolId, tool] of this.toolsMap.entries()) {
+        if (toolId.startsWith("LIST-API-ENDPOINTS") || toolId.startsWith("GET-API-ENDPOINT-SCHEMA") || toolId.startsWith("INVOKE-API-ENDPOINT")) {
+          continue;
+        }
+        try {
+          const { method, path } = this.parseToolId(toolId);
+          endpoints.push({
+            toolId,
+            name: tool.name,
+            description: tool.description,
+            method: method.toUpperCase(),
+            path
+          });
+        } catch (error) {
+          continue;
+        }
+      }
+    }
+    return {
+      endpoints,
+      total: endpoints.length,
+      note: this.openApiSpec ? "Use INVOKE-API-ENDPOINT to call specific endpoints with the path parameter" : "Limited endpoint information - OpenAPI spec not available"
+    };
+  }
+  /**
+   * Handle the GET-API-ENDPOINT-SCHEMA meta-tool
+   * Returns the JSON schema for a specified API endpoint
+   */
+  handleGetApiEndpointSchema(toolId, params) {
+    const { endpoint } = params;
+    if (!endpoint) {
+      throw new Error(`Missing required parameter 'endpoint' for tool '${toolId}'`);
+    }
+    if (this.openApiSpec) {
+      const pathItem = this.openApiSpec.paths[endpoint];
+      if (!pathItem) {
+        throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+      }
+      const operations = [];
+      for (const [method, operation] of Object.entries(pathItem)) {
+        if (method === "parameters" || !operation) continue;
+        if (!isValidHttpMethod(method)) {
+          continue;
+        }
+        const op = operation;
+        operations.push({
+          method: method.toUpperCase(),
+          operationId: op.operationId || "",
+          summary: op.summary || "",
+          description: op.description || "",
+          parameters: op.parameters || [],
+          requestBody: op.requestBody || null,
+          responses: op.responses || {},
+          tags: op.tags || []
+        });
+      }
+      if (operations.length === 0) {
+        throw new Error(`No valid HTTP operations found for path '${endpoint}' in tool '${toolId}'`);
+      }
+      return {
+        path: endpoint,
+        operations,
+        pathParameters: pathItem.parameters || []
+      };
+    } else {
+      let matchingTool;
+      let matchingToolId;
+      for (const [toolId2, tool] of this.toolsMap.entries()) {
+        try {
+          const { path } = this.parseToolId(toolId2);
+          if (path === endpoint) {
+            matchingTool = tool;
+            matchingToolId = toolId2;
+            break;
+          }
+        } catch (error) {
+          continue;
+        }
+      }
+      if (!matchingTool || !matchingToolId) {
+        throw new Error(`No endpoint found for path: ${endpoint}`);
+      }
+      return {
+        toolId: matchingToolId,
+        name: matchingTool.name,
+        description: matchingTool.description,
+        inputSchema: matchingTool.inputSchema,
+        note: "Limited schema information - using tool definition instead of OpenAPI spec"
+      };
+    }
+  }
+  /**
+   * Handle the INVOKE-API-ENDPOINT meta-tool
+   * Dynamically invokes an API endpoint with the provided parameters
+   */
+  async handleInvokeApiEndpoint(toolId, params) {
+    const { endpoint, method, params: endpointParams = {} } = params;
+    if (!endpoint) {
+      throw new Error(`Missing required parameter 'endpoint' for tool '${toolId}'`);
+    }
+    if (method) {
+      const toolId2 = generateToolId(method, endpoint);
+      if (this.toolsMap.has(toolId2)) {
+        return this.executeApiCall(toolId2, endpointParams);
+      } else if (this.openApiSpec) {
+        const pathItem = this.openApiSpec.paths[endpoint];
+        if (pathItem && pathItem[method.toLowerCase()]) {
+          const { method: httpMethod, path } = { method: method.toUpperCase(), path: endpoint };
+          return this.makeDirectHttpRequest(httpMethod, path, endpointParams);
+        } else {
+          throw new Error(
+            `No endpoint found for path '${endpoint}' with method '${method}' in tool '${toolId2}'`
+          );
+        }
+      } else {
+        throw new Error(`Tool not found: ${toolId2}`);
+      }
+    }
+    if (this.openApiSpec) {
+      const pathItem = this.openApiSpec.paths[endpoint];
+      if (pathItem) {
+        for (const method2 of VALID_HTTP_METHODS) {
+          if (pathItem[method2]) {
+            return this.makeDirectHttpRequest(method2.toUpperCase(), endpoint, endpointParams);
+          }
+        }
+        throw new Error(`No HTTP operations found for endpoint '${endpoint}' in tool '${toolId}'`);
+      } else {
+        throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+      }
+    }
+    throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+  }
+  /**
+   * Make a direct HTTP request without going through the tool system
+   * Used by dynamic meta-tools when we have OpenAPI spec but no corresponding tool
+   */
+  async makeDirectHttpRequest(method, path, params) {
+    const authHeaders = await this.authProvider.getAuthHeaders();
+    const config = {
+      method: method.toLowerCase(),
+      url: path,
+      headers: authHeaders
+    };
+    if (isGetLikeMethod(method)) {
+      config.params = this.processQueryParams(params);
+    } else {
+      config.data = params;
+    }
+    try {
+      const response = await this.axiosInstance.request(config);
+      return response.data;
+    } catch (error) {
+      if (axios_default.isAxiosError(error)) {
+        const axiosError = error;
+        throw new Error(
+          `API request failed: ${axiosError.message}${axiosError.response ? ` (${axiosError.response.status}: ${typeof axiosError.response.data === "object" ? JSON.stringify(axiosError.response.data) : axiosError.response.data})` : ""}`
+        );
+      }
+      throw error;
+    }
+  }
 };
 
 // src/server.ts
@@ -18652,7 +18909,11 @@ var OpenAPIServer = class {
     );
     this.toolsManager = new ToolsManager(config);
     const authProviderOrHeaders = config.authProvider || new StaticAuthProvider(config.headers);
-    this.apiClient = new ApiClient(config.apiBaseUrl, authProviderOrHeaders);
+    this.apiClient = new ApiClient(
+      config.apiBaseUrl,
+      authProviderOrHeaders,
+      this.toolsManager.getSpecLoader()
+    );
     this.initializeHandlers();
   }
   /**
@@ -18717,6 +18978,10 @@ var OpenAPIServer = class {
       toolsMap.set(toolId, tool);
     }
     this.apiClient.setTools(toolsMap);
+    const spec = this.toolsManager.getOpenApiSpec();
+    if (spec) {
+      this.apiClient.setOpenApiSpec(spec);
+    }
     await this.server.connect(transport);
   }
 };

package/dist/cli.js

@@ -14381,10 +14381,15 @@ function parseToolId(toolId) {
   return { method, path: "/" + path };
 }
 function sanitizeForToolId(input) {
-  return input.replace(/[^A-Za-z0-9_-]/g, "").replace(/_{3,}/g, "__").replace(/^[_-]+|[_-]+$/g, "");
+  let result = input.replace(/[^A-Za-z0-9_-]/g, "").replace(/_{3,}/g, "__");
+  result = collapseExcessiveHyphens(result);
+  return result.replace(/^[_-]+|[_-]+$/g, "");
+}
+function collapseExcessiveHyphens(input) {
+  return input.replace(/-{4,}/g, "---");
 }
 function generateToolId(method, path) {
-  const cleanPath = path.replace(/^\//, "").replace(/\/+/g, "/").replace(/\{([^}]+)\}/g, "$1").replace(/\//g, "__");
+  const cleanPath = path.replace(/^\//, "").replace(/\/+/g, "/").replace(/\{([^}]+)\}/g, "---$1").replace(/\//g, "__");
   const sanitizedPath = sanitizeForToolId(cleanPath);
   return `${method.toUpperCase()}::${sanitizedPath}`;
 }
@@ -14989,6 +14994,19 @@ var ToolsManager = class {
   }
   tools = /* @__PURE__ */ new Map();
   specLoader;
+  loadedSpec;
+  /**
+   * Get the OpenAPI spec loader instance
+   */
+  getSpecLoader() {
+    return this.specLoader;
+  }
+  /**
+   * Get the loaded OpenAPI specification
+   */
+  getOpenApiSpec() {
+    return this.loadedSpec;
+  }
   /**
    * Create dynamic discovery meta-tools
    */
@@ -15016,7 +15034,12 @@ var ToolsManager = class {
       inputSchema: {
         type: "object",
         properties: {
-          endpoint: { type: "string", description: "Endpoint path to invoke" },
+          endpoint: { type: "string", description: "Endpoint path to invoke (e.g. /users/{id})" },
+          method: {
+            type: "string",
+            description: "HTTP method to use (optional, e.g. GET, POST, PUT, DELETE)",
+            enum: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS", "HEAD"]
+          },
           params: {
             type: "object",
             description: "Parameters for the API call",
@@ -15037,6 +15060,7 @@ var ToolsManager = class {
       this.config.specInputMethod,
       this.config.inlineSpecContent
     );
+    this.loadedSpec = spec;
     if (this.config.toolsMode === "dynamic") {
       this.tools = this.createDynamicTools();
       return;
@@ -18472,18 +18496,39 @@ var StaticAuthProvider = class {
   }
 };
 
+// src/utils/http-methods.ts
+var VALID_HTTP_METHODS = [
+  "get",
+  "post",
+  "put",
+  "patch",
+  "delete",
+  "options",
+  "head"
+];
+var GET_LIKE_METHODS = ["get", "delete", "head", "options"];
+function isValidHttpMethod(method) {
+  return VALID_HTTP_METHODS.includes(method.toLowerCase());
+}
+function isGetLikeMethod(method) {
+  return GET_LIKE_METHODS.includes(method.toLowerCase());
+}
+
 // src/api-client.ts
 var ApiClient = class {
   axiosInstance;
   toolsMap = /* @__PURE__ */ new Map();
   authProvider;
+  specLoader;
+  openApiSpec;
   /**
    * Create a new API client
    *
    * @param baseUrl - Base URL for the API
    * @param authProviderOrHeaders - AuthProvider instance or static headers for backward compatibility
+   * @param specLoader - Optional OpenAPI spec loader for dynamic meta-tools
    */
-  constructor(baseUrl, authProviderOrHeaders) {
+  constructor(baseUrl, authProviderOrHeaders, specLoader) {
     this.axiosInstance = axios_default.create({
       baseURL: baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`
     });
@@ -18494,6 +18539,7 @@ var ApiClient = class {
     } else {
       this.authProvider = authProviderOrHeaders;
     }
+    this.specLoader = specLoader;
   }
   /**
    * Set the available tools for the client
@@ -18503,6 +18549,14 @@ var ApiClient = class {
   setTools(tools) {
     this.toolsMap = tools;
   }
+  /**
+   * Set the OpenAPI specification for dynamic meta-tools
+   *
+   * @param spec - The OpenAPI specification document
+   */
+  setOpenApiSpec(spec) {
+    this.openApiSpec = spec;
+  }
   /**
    * Get a tool definition by ID
    *
@@ -18532,6 +18586,15 @@ var ApiClient = class {
    */
   async executeApiCallWithRetry(toolId, params, isRetry) {
     try {
+      if (toolId === "LIST-API-ENDPOINTS") {
+        return await this.handleListApiEndpoints();
+      }
+      if (toolId === "GET-API-ENDPOINT-SCHEMA") {
+        return this.handleGetApiEndpointSchema(toolId, params);
+      }
+      if (toolId === "INVOKE-API-ENDPOINT") {
+        return this.handleInvokeApiEndpoint(toolId, params);
+      }
       const { method, path } = this.parseToolId(toolId);
       const toolDef = this.getToolDefinition(toolId);
       const paramsCopy = { ...params };
@@ -18546,7 +18609,10 @@ var ApiClient = class {
           const paramLocation = paramDef_any?.["x-parameter-location"];
           if (paramLocation === "path") {
             const escapedKey = escapeRegExp(key);
-            const paramRegex = new RegExp(`\\{${escapedKey}\\}|:${escapedKey}(?:\\/|$)`, "g");
+            const paramRegex = new RegExp(
+              `\\{${escapedKey}\\}|:${escapedKey}(?:\\/|$)|---${escapedKey}(?=__|/|$)`,
+              "g"
+            );
             if (paramRegex.test(resolvedPath)) {
               resolvedPath = resolvedPath.replace(
                 paramRegex,
@@ -18562,7 +18628,10 @@ var ApiClient = class {
         for (const key of Object.keys(paramsCopy)) {
           const value = paramsCopy[key];
           const escapedKey = escapeRegExp(key);
-          const paramRegex = new RegExp(`\\{${escapedKey}\\}|:${escapedKey}(?:\\/|$)`, "g");
+          const paramRegex = new RegExp(
+            `\\{${escapedKey}\\}|:${escapedKey}(?:\\/|$)|---${escapedKey}(?=__|/|$)`,
+            "g"
+          );
           if (paramRegex.test(resolvedPath)) {
             resolvedPath = resolvedPath.replace(
               paramRegex,
@@ -18581,7 +18650,7 @@ var ApiClient = class {
         url: resolvedPath,
         headers: authHeaders
       };
-      if (["get", "delete", "head", "options"].includes(method.toLowerCase())) {
+      if (isGetLikeMethod(method)) {
         config.params = this.processQueryParams(paramsCopy);
       } else {
         config.data = paramsCopy;
@@ -18631,6 +18700,194 @@ var ApiClient = class {
     }
     return result;
   }
+  /**
+   * Handle the LIST-API-ENDPOINTS meta-tool
+   * Returns a list of all available API endpoints from the loaded tools
+   */
+  async handleListApiEndpoints() {
+    const endpoints = [];
+    if (this.openApiSpec) {
+      for (const [path, pathItem] of Object.entries(this.openApiSpec.paths)) {
+        if (!pathItem) continue;
+        for (const [method, operation] of Object.entries(pathItem)) {
+          if (method === "parameters" || !operation) continue;
+          if (!isValidHttpMethod(method)) {
+            continue;
+          }
+          const op = operation;
+          endpoints.push({
+            method: method.toUpperCase(),
+            path,
+            summary: op.summary || "",
+            description: op.description || "",
+            operationId: op.operationId || "",
+            tags: op.tags || []
+          });
+        }
+      }
+    } else {
+      for (const [toolId, tool] of this.toolsMap.entries()) {
+        if (toolId.startsWith("LIST-API-ENDPOINTS") || toolId.startsWith("GET-API-ENDPOINT-SCHEMA") || toolId.startsWith("INVOKE-API-ENDPOINT")) {
+          continue;
+        }
+        try {
+          const { method, path } = this.parseToolId(toolId);
+          endpoints.push({
+            toolId,
+            name: tool.name,
+            description: tool.description,
+            method: method.toUpperCase(),
+            path
+          });
+        } catch (error) {
+          continue;
+        }
+      }
+    }
+    return {
+      endpoints,
+      total: endpoints.length,
+      note: this.openApiSpec ? "Use INVOKE-API-ENDPOINT to call specific endpoints with the path parameter" : "Limited endpoint information - OpenAPI spec not available"
+    };
+  }
+  /**
+   * Handle the GET-API-ENDPOINT-SCHEMA meta-tool
+   * Returns the JSON schema for a specified API endpoint
+   */
+  handleGetApiEndpointSchema(toolId, params) {
+    const { endpoint } = params;
+    if (!endpoint) {
+      throw new Error(`Missing required parameter 'endpoint' for tool '${toolId}'`);
+    }
+    if (this.openApiSpec) {
+      const pathItem = this.openApiSpec.paths[endpoint];
+      if (!pathItem) {
+        throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+      }
+      const operations = [];
+      for (const [method, operation] of Object.entries(pathItem)) {
+        if (method === "parameters" || !operation) continue;
+        if (!isValidHttpMethod(method)) {
+          continue;
+        }
+        const op = operation;
+        operations.push({
+          method: method.toUpperCase(),
+          operationId: op.operationId || "",
+          summary: op.summary || "",
+          description: op.description || "",
+          parameters: op.parameters || [],
+          requestBody: op.requestBody || null,
+          responses: op.responses || {},
+          tags: op.tags || []
+        });
+      }
+      if (operations.length === 0) {
+        throw new Error(`No valid HTTP operations found for path '${endpoint}' in tool '${toolId}'`);
+      }
+      return {
+        path: endpoint,
+        operations,
+        pathParameters: pathItem.parameters || []
+      };
+    } else {
+      let matchingTool;
+      let matchingToolId;
+      for (const [toolId2, tool] of this.toolsMap.entries()) {
+        try {
+          const { path } = this.parseToolId(toolId2);
+          if (path === endpoint) {
+            matchingTool = tool;
+            matchingToolId = toolId2;
+            break;
+          }
+        } catch (error) {
+          continue;
+        }
+      }
+      if (!matchingTool || !matchingToolId) {
+        throw new Error(`No endpoint found for path: ${endpoint}`);
+      }
+      return {
+        toolId: matchingToolId,
+        name: matchingTool.name,
+        description: matchingTool.description,
+        inputSchema: matchingTool.inputSchema,
+        note: "Limited schema information - using tool definition instead of OpenAPI spec"
+      };
+    }
+  }
+  /**
+   * Handle the INVOKE-API-ENDPOINT meta-tool
+   * Dynamically invokes an API endpoint with the provided parameters
+   */
+  async handleInvokeApiEndpoint(toolId, params) {
+    const { endpoint, method, params: endpointParams = {} } = params;
+    if (!endpoint) {
+      throw new Error(`Missing required parameter 'endpoint' for tool '${toolId}'`);
+    }
+    if (method) {
+      const toolId2 = generateToolId(method, endpoint);
+      if (this.toolsMap.has(toolId2)) {
+        return this.executeApiCall(toolId2, endpointParams);
+      } else if (this.openApiSpec) {
+        const pathItem = this.openApiSpec.paths[endpoint];
+        if (pathItem && pathItem[method.toLowerCase()]) {
+          const { method: httpMethod, path } = { method: method.toUpperCase(), path: endpoint };
+          return this.makeDirectHttpRequest(httpMethod, path, endpointParams);
+        } else {
+          throw new Error(
+            `No endpoint found for path '${endpoint}' with method '${method}' in tool '${toolId2}'`
+          );
+        }
+      } else {
+        throw new Error(`Tool not found: ${toolId2}`);
+      }
+    }
+    if (this.openApiSpec) {
+      const pathItem = this.openApiSpec.paths[endpoint];
+      if (pathItem) {
+        for (const method2 of VALID_HTTP_METHODS) {
+          if (pathItem[method2]) {
+            return this.makeDirectHttpRequest(method2.toUpperCase(), endpoint, endpointParams);
+          }
+        }
+        throw new Error(`No HTTP operations found for endpoint '${endpoint}' in tool '${toolId}'`);
+      } else {
+        throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+      }
+    }
+    throw new Error(`No endpoint found for path '${endpoint}' in tool '${toolId}'`);
+  }
+  /**
+   * Make a direct HTTP request without going through the tool system
+   * Used by dynamic meta-tools when we have OpenAPI spec but no corresponding tool
+   */
+  async makeDirectHttpRequest(method, path, params) {
+    const authHeaders = await this.authProvider.getAuthHeaders();
+    const config = {
+      method: method.toLowerCase(),
+      url: path,
+      headers: authHeaders
+    };
+    if (isGetLikeMethod(method)) {
+      config.params = this.processQueryParams(params);
+    } else {
+      config.data = params;
+    }
+    try {
+      const response = await this.axiosInstance.request(config);
+      return response.data;
+    } catch (error) {
+      if (axios_default.isAxiosError(error)) {
+        const axiosError = error;
+        throw new Error(
+          `API request failed: ${axiosError.message}${axiosError.response ? ` (${axiosError.response.status}: ${typeof axiosError.response.data === "object" ? JSON.stringify(axiosError.response.data) : axiosError.response.data})` : ""}`
+        );
+      }
+      throw error;
+    }
+  }
 };
 
 // src/server.ts
@@ -18652,7 +18909,11 @@ var OpenAPIServer = class {
     );
     this.toolsManager = new ToolsManager(config);
     const authProviderOrHeaders = config.authProvider || new StaticAuthProvider(config.headers);
-    this.apiClient = new ApiClient(config.apiBaseUrl, authProviderOrHeaders);
+    this.apiClient = new ApiClient(
+      config.apiBaseUrl,
+      authProviderOrHeaders,
+      this.toolsManager.getSpecLoader()
+    );
     this.initializeHandlers();
   }
   /**
@@ -18717,6 +18978,10 @@ var OpenAPIServer = class {
       toolsMap.set(toolId, tool);
     }
     this.apiClient.setTools(toolsMap);
+    const spec = this.toolsManager.getOpenApiSpec();
+    if (spec) {
+      this.apiClient.setOpenApiSpec(spec);
+    }
     await this.server.connect(transport);
   }
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ivotoby/openapi-mcp-server",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "An MCP server that exposes OpenAPI endpoints as resources",
   "license": "MIT",
   "type": "module",