Api To Typemcp

Use when a user wants to turn an API URL, OpenAPI/Swagger file or link, Swagger UI, or Markdown/HTML API documentation into a standalone TypeMCP MCP project through the type-mcp-api-cli.

Overview

This skill orchestrates the independently versioned packages/type-mcp-api-cli package in this workspace (or a future trusted npm release of that same package). It does not parse specifications, extract endpoints, create TypeScript templates, or substitute its own generator. The CLI is the deterministic engine; this skill is the approval, safety, verification, and publication layer.

The target is a normal standalone TypeScript MCP repository whose runtime dependency is npm type-mcp.

When to use

Use this skill when the user provides or asks to use:

• an OpenAPI 3.x or Swagger 2.0 JSON/YAML URL or file;
• a Swagger UI URL;
• a Markdown/HTML API reference URL;
• an API documentation URL plus a request to produce a maintainable TypeMCP MCP project.

Do not use it for a bare base URL with no supplied API documentation. Do not use it to guess endpoints, execute mutating calls by default, or publish a repository without final confirmation.

Required user inputs

Collect or infer only what is needed for the requested stage:

Stage	Required inputs
Inspect/manifest	API source URL/file and optionally desired CLI version/path
Generate	An approved manifest plus an empty local output directory
Publish	Confirmed GitHub owner/org, repository name, visibility, and source branch

For Markdown/HTML documents, manifest approval is mandatory. Do not proceed from candidate manifest to generation based on an implied or stale approval.

Workflow

1. Establish the source and CLI

1. Identify the source type: structured specification, Swagger UI, or supplied Markdown/HTML documentation.
2. Resolve an exact CLI only through docs/guides/cli-compatibility.md. Until that policy enables a release, stop and report that no CLI is supported.
3. For an enabled release, use the policy's isolated npm-install/integrity/absolute-bin flow before executing anything. Treat metadata as compatibility validation after artifact provenance, never as provenance proof.
4. Stop on incompatibility or an untrusted executable; report the missing requirement rather than reimplementing CLI behavior.

Completion criterion: the selected CLI provenance (when a release is enabled) and sanitized source descriptor are recorded without any secret value; otherwise the workflow stops with the documented no-supported-CLI outcome.

2. Inspect and obtain a manifest

1. Invoke the CLI inspect stage on the supplied source.
2. Invoke the manifest stage and receive a secret-free, versioned manifest plus safe diagnostics.
3. Verify the manifest has source kind, content hash, operations, auth mapping names, confidence, evidence, warnings, a JCS-recomputable canonical manifestDigest, and a valid approval requirement/challenge.
4. Independently recompute the digest from the closed versioned schema and RFC 8785 payload; stop on mismatch.
5. Present the operation table, derived policy, challenge/receipt requirement, and warnings to the user.

Completion criterion: there is one schema-valid manifest whose JCS-recomputed canonical digest, approval challenge requirement, CLI version, and schema/protocol versions are known.

3. Apply approval and policy gates

1. If the manifest is document-derived, display its exact canonical manifestDigest and explicit challengeId, then request user confirmation.
2. After confirmation, invoke CLI approve in the isolated state directory. Retain the CLI-issued receipt separately; never edit the manifest to simulate approval.
3. Provide the receipt to generate; require successful MAC/challenge/expiry/digest/version/protocol verification. A receipt is single-use.
4. Let the user remove operations or adjust tool names, auth mapping names, and policy before approval.
5. Derive GET/HEAD/OPTIONS as read; POST/PUT/PATCH/DELETE as protected-write; and unknown methods as deny. A parser may not change that mapping.
6. Permit a policy override only as a visible, reasoned approved-override manifest edit; then recompute digest and obtain a new receipt if document-derived. Never override unknown methods from deny.
7. If the manifest changes or receipt expires/is consumed, invalidate approval and repeat review.

Completion criterion: every operation to generate is explicitly approved and write behavior is policy-gated.

4. Generate through the CLI

1. Confirm the local output directory is empty or user-approved for replacement.
2. Invoke the CLI generation stage with the approved manifest and selected output directory.
3. Do not inject secrets into CLI arguments, generated files, logs, or Git metadata.
4. Confirm generated package.json declares npm type-mcp, not a path/file/git copy of its source.

Completion criterion: the CLI reports generation metadata and all generated paths are under the approved output directory.

5. Independently verify generated output

Run generated-project checks only through the contained-verification policy in docs/guides/security-and-publication.md:

1. use a fresh temporary workspace and scrubbed environment;
2. inspect package.json and the lockfile, then run npm ci --ignore-scripts;
3. keep upstream network calls disabled and use a local fixture/mock for the official-SDK MCP smoke test;
4. run lifecycle scripts only inside that containment; and
5. obtain separate explicit user approval before any authenticated/live-upstream smoke test.

Within that boundary, run the generated project’s applicable checks:

bash

npm run lint
npm run typecheck
npm test
npm run build
npm run verify:package
npm audit --omit=dev --audit-level=high
git diff --check

Verify a denied write-policy operation sends no upstream request. Treat failures as generator/manifest defects; do not patch generated source invisibly.

Completion criterion: fresh tool output demonstrates the generated project uses installed npm type-mcp and passes its applicable checks.

6. Publish only with final confirmation

Immediately before GitHub creation/push, ask for and record confirmation of owner/org, repository name, visibility, and source branch. Before staging, committing, or pushing, resolve the actual checked-out/ref-to-publish branch and stop unless it exactly equals the recorded source branch. Only after this ref verification, create, commit, push that verified ref, and read back the remote URL/default branch. Scan staged/tracked files for secrets before reporting success.

Completion criterion: the user-confirmed repository exists remotely and contains the verified generated project with no credential-bearing artifact.

Authentication and error safety

• Use only environment-variable references plus approved header/query mappings.
• Do not store or echo token values.
• Return safe summaries of CLI/upstream errors; no stacks, authorization values, response secrets, or raw private specs.
• If a source includes a likely credential, redact it from the review artifact and stop for user guidance.

Common pitfalls

1. Duplicating CLI behavior in the skill. Fix or extend type-mcp-api-cli; do not add parser/template logic here.
2. Treating a documentation URL as an approved contract. Markdown/HTML candidates always need explicit manifest approval.
3. Installing an arbitrary globally available CLI. Validate package/version/protocol/schema before calling it.
4. Skipping generated-project verification. A generated directory is not a deliverable until it installs npm type-mcp and runs through an official MCP transport.
5. Publishing too early. GitHub repository creation/push has a separate final confirmation gate even after manifest approval.

Verification checklist

• CLI provenance/version and manifest schema/protocol compatibility verified
• Manifest is secret-free and evidence-backed
• Document-derived manifest has a CLI-issued, unexpired, single-use receipt bound to the current JCS digest/version/protocol
• Every approved operation generated; TYPE_MCP_ALLOW_PROTECTED_OPERATIONS exact-ID gate and deny-before-request-construction behavior are verified
• Generated project installs npm type-mcp and passes applicable checks
• Official-transport MCP smoke test passes
• GitHub owner/name/visibility/branch confirmed immediately before publication
• No secret or downloaded private specification is committed or published