Is Apitap safe to use?

Apitap has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Apitap?

Apitap supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

Apitap provides 10 tools: import, capture, attach, list, show and 5 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Apitap?

Apitap is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Apitap actively maintained?

Apitap is recently maintained — last commit was 51 days ago. It has 83 GitHub stars.

Apitap

Name: Apitap
Author: n1byn1kt

@apitap/core · by n1byn1kt

The MCP server that turns any website into an API — no docs, no SDK, no browser. npm: @apitap/core

83 231/wk 10 tools GitHub npm

No known CVEs

No license

Maintained

Last commit 51d ago

Works with most clients

Transport: stdio, sse, http

10 tools · ~962 tok

Grade B · 0.5% of 200K ctx

Edit this pageView history

Developer Tools Browser

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "apitap": {
      "args": [
        "mcp"
      ],
      "command": "apitap"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/apitap)](https://mcppedia.org/s/apitap)

Read me

What Apitap does

The CLI, MCP server, and npm library that turns any website into an API — no docs, no SDK, no browser.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @apitap/core against OSV.dev.

Inventory

Tools (10)

Click any tool to inspect its schema.

~962 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Apitap safe to use?: Apitap has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Apitap?: Apitap supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Apitap do?: Apitap provides 10 tools: import, capture, attach, list, show and 5 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Apitap?: Apitap is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Apitap actively maintained?: Apitap is recently maintained — last commit was 51 days ago. It has 83 GitHub stars.

Similar servers

Others in developer-tools / browser

View all →

Puppeteer MCP Server98

Browser automation with Puppeteer for web scraping and testing

86.4k 5

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.8k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

5.8k 1

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

MCP Security Weekly

Get CVE alerts and security updates for Apitap and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools Browser

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "apitap": {
      "args": [
        "mcp"
      ],
      "command": "apitap"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/apitap)](https://mcppedia.org/s/apitap)

Read me

What Apitap does

The CLI, MCP server, and npm library that turns any website into an API — no docs, no SDK, no browser.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

README

ApiTap

The CLI, MCP server, and npm library that turns any website into an API — no docs, no SDK, no browser.

ApiTap is a CLI, MCP server, and npm library that lets AI agents (and you) browse the web through APIs instead of browsers. It ships with 6,400+ pre-mapped endpoints across 280+ APIs (Stripe, GitHub, Twilio, Slack, Spotify, and more) — ready to query on install. For sites not in the database, it captures API traffic from any website, generates reusable "skill files," and replays them directly with fetch(). No DOM, no selectors, no flaky waits. Token costs drop 20-100x compared to browser automation.

The web was built for human eyes; ApiTap makes it native to machines.

# Import 280+ APIs instantly — no browser needed
apitap import --from apis-guru --limit 100
  Done: 87 imported, 3 failed, 10 skipped
       1,847 endpoints added across 87 APIs

# Replay any imported endpoint immediately
apitap replay api.stripe.com get-listcharges limit=5

# Or capture a site's private API
apitap capture https://polymarket.com
apitap replay gamma-api.polymarket.com get-events

# Or read content directly
apitap read https://en.wikipedia.org/wiki/Node.js
  ✓ Wikipedia decoder: ~127 tokens (vs ~4,900 raw HTML)

No scraping. No browser. Just the API.

How It Works

ApiTap has three ways to build its API knowledge:

Import (instant) — Import OpenAPI/Swagger specs from the APIs.guru directory of 2,500+ public APIs, or from any spec URL/file. Endpoints get a confidence score based on spec quality. No browser needed.
Capture (30 seconds) — Launch a browser, visit a site, browse normally. ApiTap intercepts all network traffic via CDP, filters noise, and generates a skill file. Or use apitap attach to capture from your already-running Chrome.
Discover (automatic) — ApiTap auto-detects frameworks (WordPress, Next.js, Shopify) and probes for OpenAPI specs at common paths. Works without a browser.

All three paths produce the same artifact: a skill file — a portable JSON map of an API's endpoints, stored at ~/.apitap/skills/.

Import:   OpenAPI spec → Converter → Merge → skill.json (confidence 0.6-0.85)
Capture:  Browser → CDP listener → Filter → Skill Generator → skill.json (confidence 1.0)
Attach:   Running Chrome → CDP attach → Filter → skill.json (confidence 0.8-1.0)
Replay:   Agent → Replay Engine (skill.json) → fetch() → API → JSON response
                                                ↑ no browser in this path

Confidence Model

Every endpoint tracks how it was discovered:

Source	Confidence	Meaning
Captured with response body	1.0	Full capture — response shape verified
OpenAPI import, high quality	0.85	Spec has response examples
CDP skeleton (real traffic, no body)	0.8	Endpoint exists, body was evicted from Chrome buffer
OpenAPI import, base	0.6	Thin spec, no examples

Imported endpoints auto-upgrade to confidence 1.0 on first successful replay. The merge is additive — captured data is never overwritten by imports, imports fill gaps that capture missed.

Install

npm install -g @apitap/core

Claude Code — one command to wire it up:

claude mcp add -s user apitap -- apitap mcp

That's it. 12 MCP tools, ready to go. Requires Node.js 20+.

Note: npx @apitap/core mcp does not work due to npm scoped package bin resolution. Use npx apitap mcp or apitap-mcp instead.

Optional: To use capture and browse (which o

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @apitap/core against OSV.dev.

Inventory

Tools (10)

Click any tool to inspect its schema.

~962 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Apitap safe to use?: Apitap has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Apitap?: Apitap supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Apitap do?: Apitap provides 10 tools: import, capture, attach, list, show and 5 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Apitap?: Apitap is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Apitap actively maintained?: Apitap is recently maintained — last commit was 51 days ago. It has 83 GitHub stars.