mcp-from-openapi 2.6.0 → 2.7.0

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-from-openapi",
-  "version": "2.6.0",
+  "version": "2.7.0",
   "description": "Production-ready library for converting OpenAPI specifications into MCP tool definitions",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -49,20 +49,22 @@
     }
   },
   "dependencies": {
-    "@apidevtools/json-schema-ref-parser": "^15.3.5",
+    "@apidevtools/json-schema-ref-parser": "^15.5.1",
     "openapi-types": "^12.1.3",
-    "yaml": "^2.8.3"
+    "yaml": "^2.9.0"
   },
   "peerDependencies": {
     "zod": "^4.0.0"
   },
   "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "@swc/core": "~1.5.7",
     "@swc/helpers": "^0.5.18",
     "@swc/jest": "~0.2.38",
     "@types/jest": "^29.5.0",
     "@types/json-schema": "^7.0.15",
     "@types/node": "^24.0.0",
+    "ajv": "^8.17.0",
     "esbuild": "^0.27.2",
     "jest": "^29.7.0",
     "tslib": "^2.8.1",

package/generator.d.ts

@@ -1,4 +1,19 @@
 import type { OpenAPIDocument, LoadOptions, GenerateOptions, McpOpenAPITool, ValidationResult } from './types';
+import { type LintResult } from './lint';
+/**
+ * 32-bit FNV-1a hash rendered as 8 hex chars. Used for stable, content-derived
+ * name suffixes (no Node `crypto` dependency, so V8-isolate runtimes work).
+ */
+export declare function fnv1aHex(input: string): string;
+/**
+ * Sanitize and cap a tool name per MCP rules: only `[A-Za-z0-9_.-]`, 1-128
+ * chars. Invalid characters become underscores (collapsed); names longer than
+ * `maxLength` are truncated with a hash suffix derived from the FULL original
+ * name, keeping truncated names unique and stable across regenerations.
+ * `fallbackSeed` names the operation (method + path) when sanitization leaves
+ * nothing usable.
+ */
+export declare function normalizeToolName(raw: string, maxLength: number, fallbackSeed: string): string;
 /**
  * Main class for generating MCP tools from OpenAPI specifications
  */
@@ -34,6 +49,13 @@ export declare class OpenAPIToolGenerator {
      * Validate the OpenAPI document
      */
     validate(): Promise<ValidationResult>;
+    /**
+     * Lint the loaded document for agent-readiness (missing operationIds,
+     * vague descriptions, unpaginated lists, oversized schemas, ...). Runs
+     * after overlays and dereferencing so findings reflect what tools would
+     * actually be generated from.
+     */
+    lint(): Promise<LintResult>;
     /**
      * Build $RefParser options based on refResolution configuration.
      * Defaults: allow http/https, block file://, block internal IPs.

package/index.d.ts

@@ -7,15 +7,31 @@ export { SecurityResolver, createSecurityContext } from './security-resolver';
 export { BUILTIN_FORMAT_RESOLVERS, resolveSchemaFormats } from './format-resolver';
 export { inferAnnotationsFromMethod, extractExtensionOverrides, resolveExtensionEnabled } from './annotations';
 export type { ExtensionToolOverrides } from './annotations';
+export { emitToolTypeScript, toPascalIdentifier } from './type-signature';
+export type { ToolTypeScriptInfo, TypeSignatureOptions } from './type-signature';
+export { dottedNaming, CODECALL_RESERVED_NAMESPACES } from './naming-presets';
+export type { DottedNamingOptions } from './naming-presets';
+export { deriveSecurityElicitations } from './elicitation';
+export type { SecurityElicitation, ElicitationField } from './elicitation';
+export { fromArazzo } from './arazzo';
+export type { FromArazzoOptions, ArazzoGenerateOptions } from './arazzo';
+export { parseRuntimeExpression } from './arazzo-expressions';
+export type { ArazzoDocument, ArazzoInfo, ArazzoSourceDescription, ArazzoWorkflow, ArazzoStep, ArazzoParameter, ArazzoRequestBody, ArazzoPayloadReplacement, ArazzoCriterion, ArazzoCriterionType, ArazzoSuccessAction, ArazzoFailureAction, ArazzoReusableObject, ArazzoComponents, WorkflowIR, WorkflowStepIR, OperationStepIR, NestedWorkflowStepIR, StepOperationIR, StepParameterIR, StepRequestBodyIR, PayloadExpressionIR, PayloadReplacementIR, CriterionIR, ActionIR, RuntimeExpressionAST, RuntimeExpressionType, ExpressionValueIR, } from './arazzo-types';
 export { applyClientTarget, inlineLocalRefs, ensureArrayItems, collapseRootCompositions, collapseNestedUnions, demoteFormats, enforceClosedObjects, requireAllProperties, } from './client-targets';
 export type { ClientTarget } from './client-targets';
 export { buildHttpRequest } from './request-builder';
 export type { BuildHttpRequestOptions, BuiltHttpRequest } from './request-builder';
 export { toSdkTool } from './sdk';
 export type { SdkToolConfig, SdkSchemaWrapper } from './sdk';
-export { OpenAPIToolError, LoadError, SsrfError, ParseError, ValidationError, GenerationError, SchemaError, RequestBuildError } from './errors';
+export { estimateToolTokens, analyzeToolSet } from './token-report';
+export type { ToolTokenEstimate, ToolSetReport, AnalyzeToolSetOptions } from './token-report';
+export { applyOverlay } from './overlay';
+export type { OverlayDocument, OverlayAction } from './overlay';
+export { lintDocument } from './lint';
+export type { LintResult, LintFinding, LintSeverity } from './lint';
+export { OpenAPIToolError, LoadError, SsrfError, ParseError, ValidationError, GenerationError, SchemaError, RequestBuildError, OverlayError, ArazzoError } from './errors';
 export { assertUrlSafe, safeFetch, isBlockedAddress, isBlockedHostname, decodeIpv4MappedIpv6, normalizeSsrfOptions, defaultLookup, BLOCKED_HOSTNAMES, } from './ssrf';
 export type { ResolvedSsrfOptions, ResolvedAddress, SsrfHostLookup, SafeFetchOptions } from './ssrf';
-export type { McpOpenAPITool, ToolAnnotations, ParameterMapper, ToolMetadata, FrontMcpExtensionData, SerializationInfo, SecurityRequirement, SecurityParameterInfo, ServerInfo, RefResolutionOptions, LoadOptions, GenerateOptions, FormatResolver, JsonSchema, NamingStrategy, OperationWithContext, OpenAPIDocument, OpenAPIVersion, HTTPMethod, ParameterLocation, AuthType, OperationObject, ParameterObject, RequestBodyObject, ResponseObject, ResponsesObject, MediaTypeObject, HeaderObject, ExampleObject, PathItemObject, PathsObject, ServerObject, SecuritySchemeObject, ReferenceObject, TagObject, ExternalDocumentationObject, ServerVariableObject, EncodingObject, SecurityRequirementObject, SchemaObject, ValidationResult, ValidationErrorDetail, ValidationWarning, } from './types';
+export type { McpOpenAPITool, ToolAnnotations, ToolIcon, ParameterMapper, ToolMetadata, ResponseHints, FrontMcpExtensionData, SerializationInfo, SecurityRequirement, SecurityParameterInfo, ServerInfo, RefResolutionOptions, LoadOptions, GenerateOptions, FormatResolver, JsonSchema, NamingStrategy, OperationWithContext, OpenAPIDocument, OpenAPIVersion, HTTPMethod, ParameterLocation, AuthType, OperationObject, ParameterObject, RequestBodyObject, ResponseObject, ResponsesObject, MediaTypeObject, HeaderObject, ExampleObject, PathItemObject, PathsObject, ServerObject, SecuritySchemeObject, ReferenceObject, TagObject, ExternalDocumentationObject, ServerVariableObject, EncodingObject, SecurityRequirementObject, SchemaObject, ValidationResult, ValidationErrorDetail, ValidationWarning, } from './types';
 export type { SecurityContext, ResolvedSecurity, DigestAuthCredentials, ClientCertificate, AWSCredentials, SignatureData, } from './security-resolver';
 export { isReferenceObject, toJsonSchema } from './types';