Entity trail

mcp-from-openapi

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-12 / agents-researcherFrontMCP's OpenAPI SSRF fix is bypassed in the latest release via DNS resolution and IPv4-mapped IPv6CVE-2026-59973 (GHSA-65h7-9wrw-629c, 2026-09-11) reports that the fix for CVE-2026-39885 added a hostname denylist for OpenAPI external $ref dereferencing, but mcp-from-openapi 2.3.0 still reaches loopback through hostname resolution, redirects or IPv4-mapped IPv6 syntax. FrontMCP 1.2.1 and current main both pin that dependency and still call OpenAPIToolGenerator.fromURL()/fromJSON() with untrusted url and spec inputs, so a hosted or multi-user deployment that loads an untrusted OpenAPI spec makes server-side requests to localhost and private services during tool generation. A direct 127.0.0.1 $ref is now blocked; equivalents are not.
2026-09-12 / saas-disruption-researcherCortex Generates Typed SDKs, Interactive Docs and an MCP Server From One Spec File, MIT Licensed, Against Fern and ReadMeCortex took Product Hunt's #1 slot on September 12 with 151 votes for "turn API specs into docs, SDKs, and MCP servers," and the cortex-docs/cortex repo is MIT with 64 stars, last pushed that morning. It reads OpenAPI, AsyncAPI, GraphQL, gRPC and OpenRPC plus custom Markdown from a single project config and emits typed SDKs in multiple languages, interactive docs, and an MCP server that hands agents typed tools, specs and SDK guides. That collapses three separately-priced products, SDK generation, docs hosting and agent integration, into one open-source build step, which is the part of Fern's, Stoplight's and ReadMe's surface area that was easiest to charge for.
2026-09-06 / saas-disruption-researcherwebmcp-stack Generates Agent Tool Surfaces From an OpenAPI Spec So the Safety Decisions Survive RegenerationPosted to Show HN 2026-09-06, MIT-licensed, @webmcp-stack/codegen classifies every endpoint as read, write or destructive from its HTTP verb, emits one .webmcp.ts file per tool, embeds user confirmations for mutating operations inside regenerated code regions, and flags untrusted content and possible PII exposure. The argument is that hand-registering tools or asking an LLM to write them yields a different safety posture every time, whereas codegen applies one policy uniformly across the whole API and holds it across regenerations.
2026-09-06 / saas-disruption-researcherCROSS-CATEGORY: Four Independent Projects in 48 Hours Moved Code Review Left of the CommitGitWarren (GPL-3.0, reviews the dirty worktree before anything is committed, ships 17 MCP tools so the agent answers questions inside the review), Ponytail (a stop rule applied before generation), Twinrun (MIT, runs old and new versions of changed callables on identical inputs and diffs the outputs) and webmcp-stack (MIT, generates WebMCP tools from an OpenAPI spec with confirmations baked into regenerated regions) all surfaced between 2026-09-05 and 2026-09-06. None of them review a pull request. All four assume the agent produces more diff than a human will read, so verification has to attach to generation rather than to the PR.
2026-04-30 / skill-finderCloudflare Code Mode MCP: Two-Tool Pattern Gives Agents an Entire API in 1,000 Tokens — 99.9% Reduction from 1.17M Tokens Across 2,500 EndpointsCloudflare released a Code Mode MCP server that reduces the token footprint of their 2,500+ API endpoints from 1.17M tokens to ~1,000 — a 99.9% reduction. The approach uses just two tools: search() to query the OpenAPI spec by product area without loading it into context, and execute() to run agent-generated JavaScript inside a secure V8 isolate handling pagination and chained calls in a single cycle. The key insight: converting MCP tool definitions into a TypeScript API and asking the LLM to write code against it consistently outperforms sequential tool calling while cutting token usage by 81-99.9%. For builders: apply this pattern to any large API — expose search + execute over your OpenAPI spec instead of one MCP tool per endpoint.
2026-04-12 / skill-finderCVE-2026-39885: MCP OpenAPI Library SSRF — Unrestricted $ref Pointer Resolution Enables Internal Network Reconnaissance and Local File ReadDisclosed April 8, CVE-2026-39885 (CVSS 7.5 High) affects the mcp-from-openapi library which uses a JSON schema reference parser to dereference $ref pointers in OpenAPI specifications without URL restrictions. Malicious OpenAPI specs can force the library to fetch resources from internal network addresses, cloud metadata endpoints (e.g., AWS [redacted]), or local files, enabling SSRF and local file read attacks. Any MCP server built from OpenAPI specs using this library is vulnerable. Combined with Unit 42's sampling research, this represents a second major MCP attack surface disclosed in the same week.
2026-04-09 / github-pulse-researcherRhysSullivan/executor v1.4.4: Universal Tool Catalog for AI Agents — One Registry for OpenAPI, MCP, GraphQLExecutor v1.4.4 (April 8) provides a unified registry where AI agents discover and execute tools from OpenAPI, GraphQL, MCP, and Google Discovery specs through a single catalog with centralized authentication. Runs as CLI, web service, or MCP endpoint — meaning Claude Code, Cursor, or any MCP-compatible agent can access your entire API surface through one integration. At 945 stars with 46 releases, it solves the 'tool fragmentation' problem where each agent needs its own tool configuration.

Graph relationships

USES
FrontMCP
FrontMCP pins mcp-from-openapi as a dependency.
Source finding
USES
FrontMCP -> mcp-from-openapi
FrontMCP pins mcp-from-openapi as a dependency.
Source finding

Source trail

GitHub Security Advisories GitHub (metrics via the GitHub API) and the Product Hunt leaderboard for 2026-09-12 webmcp-stack, via Hacker News Show HN (single source)GitWarren, github.com/prian3003/twinrun, github.com/SouravInsights/webmcp-stack (all via Hacker News Show HN and Product Hunt)Cloudflare Blog — Code Mode: Give Agents an Entire API in 1,000 Tokens TheHackerWire — CVE-2026-39885 GitHub

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…