reshapr

mcp
Guvenlik Denetimi
Uyari
Health Gecti
  • License — License: Apache-2.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 29 GitHub stars
Code Uyari
  • network request — Outbound network request in cli/src/commands/api-token.ts
  • network request — Outbound network request in cli/src/commands/attach.ts
  • network request — Outbound network request in cli/src/commands/config.ts
  • network request — Outbound network request in cli/src/commands/expo.ts
  • network request — Outbound network request in cli/src/commands/gateway-group.ts
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This tool is a no-code MCP server designed to provide AI-native access to external APIs. It allows developers to easily spin up a local MCP server by importing OpenAPI specifications and connecting them to AI clients.

Security Assessment
Overall risk: Medium. The server operates as an API gateway and inherently makes outbound network requests to fetch configurations and communicate with external APIs (as flagged in files like `api-token.ts`, `attach.ts`, and `config.ts`). While no dangerous permissions or hardcoded secrets were detected in the scan, the quick start guide reveals that the local deployment defaults to highly insecure credentials (`admin/admin`). Because its primary function is to proxy and route external API traffic, it inherently handles and exposes sensitive data flows. Users must ensure they change default passwords immediately and avoid exposing the local control plane to the public internet.

Quality Assessment
The project demonstrates strong health and maintenance indicators. It is actively maintained, with repository pushes occurring as recently as today. It uses the standard Apache-2.0 license and has clean automated build workflows. However, community trust and adoption are currently quite low, sitting at only 29 GitHub stars, which suggests the tool is in its early stages and has not yet been battle-tested by a wide audience.

Verdict
Use with caution: the tool is active and properly licensed, but its low community adoption and default administrative credentials require strict security configurations before deploying in any sensitive environment.
SUMMARY

The open source, no-code MCP Server for AI-Native API Access

README.md

GitHub Workflow Status
Container
Version
NPM
License
Project Chat

Reshapr

The open source, no-code MCP Server for AI-Native API Access.

To get involved with our community, please familiarize yourself with the project's Code of Conduct.

Quick Start

Install the CLI

npm install -g @reshapr/reshapr-cli

Choose your platform

You have two simple options:

  1. Use the https://try.reshapr.io/ to try out the platform. Follow our detailed
    Try reShapr online guide.
  2. Run the platform locally using containers and Docker runtime. Follow next section for details.

Run the platform locally

Assuming you have Docker installed, you can run the platform locally with the following command:

reshapr run

You should see a message like this:

ℹ️  Resolved 'latest' to release '0.0.7'.
ℹ️  Downloading compose file from https://raw.githubusercontent.com/reshaprio/reshapr/refs/tags/0.0.7/install/docker-compose-all-in-one.yml...
✅ Compose file saved to /Users/<you>/.reshapr/docker-compose-0.0.7.yml
ℹ️  Starting Reshapr containers (release: 0.0.7)...
✅ Reshapr containers started successfully.

Connect to the control plane at http://localhost:5555 with default credentials (admin/admin):

reshapr login -s http://localhost:5555 -u admin -p admin

Import an OpenAPI file:

reshapr import -u https://raw.githubusercontent.com/open-meteo/open-meteo/refs/heads/main/openapi.yml \
  --backendEndpoint https://api.open-meteo.com

You now have a fully functional MCP Server powered by reShapr at http://localhost:7777/mcp/reshapr/Open-Meteo+APIs/1.0 ??

You can try it out using a MCP client, explore the CLI and
more features!

Contributing

We ❤️ contributors! Reshapr is an open community, and we welcome contributions of all kinds — not just code.
Every contribution matters and helps make Reshapr better for everyone:

  • 🐛 Report bugs or submit support requests via GitHub Issues
  • 📖 Improve documentation — fix a typo, clarify a guide, or write a new tutorial
  • 🧪 Write tests to increase coverage and reliability
  • 🎥 Create demos or share your use cases with the community
  • 💻 Submit code — bug fixes, features, or refactors are all welcome
  • 💬 Share testimonials — tell us how you use Reshapr and help spread the word

📋 Before contributing, please read our Contributing Guide to learn about our development workflow,
coding conventions, and how to submit your changes.

Come say hi on our Discord server — whether you have questions, ideas, or just want to
chat with the community. We'd love to hear from you! 🚀

Thanks!

Stargazers repo roster for @reshaprio/reshapr
Forkers repo roster for @reshaprio/reshapr

Yorumlar (0)

Sonuc bulunamadi