bkataoka/apic_mcp

apic-mcp

A minimal MCP server for IBM API Connect SaaS with login functionality.

Setup & Run

1. Copy the environment template and fill in your credentials:

   cp .env.example .env
   # Edit .env with your actual API Connect credentials
   

2. Install dependencies:

   npm i
   

3. Run the development server:

   npm run dev
   

Available Tools

platform.login

Logs in to IBM API Connect SaaS and returns token metadata.

Input: None (empty object)

Output Example:

{
  "expires_in": 3600,
  "token_preview": "eyJhbGciOiJ...",
  "region": "platform-api.us-east-a.apiconnect.automation.ibm.com"
}

platform.draft_list

Lists all draft APIs in the API Connect organization.

Input: None (empty object)

Output Example:

{
  "count": 5,
  "drafts": [
    {
      "id": "api-id",
      "name": "api-name",
      "title": "API Title",
      "version": "1.0.0",
      "api_type": "rest"
    }
  ]
}

platform.governance_scan

Runs governance rules (OWASP security scans) on a draft API.

Input:

{
  "draft_id": "api-id",
  "rule_set": "owasp"
}

platform.draft_import

Imports an API YAML from GitHub into API Connect as a draft API.

Input:

{
  "github_url": "https://github.com/user/repo/blob/main/api.yaml",
  "api_name": "optional-name",
  "api_version": "optional-version"
}

Environment Variables

API Connect Configuration

• APIC_BASE_URL: API Connect platform URL
• APIC_ORG: Your organization name
• APIC_CLIENT_ID: OAuth client ID
• APIC_CLIENT_SECRET: OAuth client secret
• APIC_API_KEY: API key for authentication

Governance Service Configuration

• GOV_ENDPOINT: Governance service endpoint URL
• GOV_CLIENT_ID: Governance service client ID
• GOV_CLIENT_SECRET: Governance service client secret

Scripts

• npm run dev: Start development server with ts-node
• npm run build: Compile TypeScript to JavaScript
• npm start: Run compiled server
• npm run typecheck: Type check without emitting files