Swagger

Publish APIs and developer portals from an AI agent.

Add to Agentman Studio

Opens Agent Studio, where connecting is one click. The connector URL below works in any MCP client.

Paste it into any MCP client. Setup docs

Resources

What the Swagger connector does

The Swagger MCP server connects SmartBear's API platform — the SwaggerHub registry and Swagger Portal — to Claude, ChatGPT and any MCP-compatible agent. It searches API definitions, generates and standardises specifications with AI, and builds and publishes developer documentation portals. Sign-in is OAuth against SmartBear's identity service.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on .

Anthropic states this reflects the level of review a connector received, not a security audit.

Swagger tools (38)

  • list_portals
  • get_portal
  • create_portal
  • update_portal
  • list_portal_products
  • get_portal_product
  • create_portal_product
  • update_portal_product
  • delete_portal_product
  • publish_portal_product
  • list_portal_product_sections
  • create_table_of_contents
  • list_table_of_contents
  • delete_table_of_contents
  • get_document
  • update_document
  • search_apis_and_domains
  • get_api_definition
  • create_or_update_api
  • scan_api_standardization
  • create_api_from_prompt
  • standardize_api

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

  • The OAuth scopes are identity claims only. SmartBear's authorization server advertises openid, profile, email and offline_access. No boundary falls between reading an API definition and publishing a portal or deleting a product — the consent screen cannot express the difference. The server's RFC 9728 descriptor names the authorization server and declares no scopes_supported at all.
  • Anthropic's listing is stale by 16 tools. The directory's 22 names are a clean subset of SmartBear's 38, but a reader sizing the surface from the listing will underestimate it, and the omissions include patch_api and the entire outbound-request path.
  • We did not read the live server's tool list. The endpoint returned 401 to an anonymous request, so the 38 tools and their annotations come from SmartBear's open-source repository at release v0.37.0, dated 2026-08-20. The remote deployment may register a different subset — the source supports filtering by toolset through configuration, and the repository is the multi-product server rather than the Swagger-only remote build. Treat 38 as the documented surface, not a live count.
  • Tool names carry no prefix here. The open-source code derives names as swagger_ plus the lower-cased title. The directory and SmartBear's own Swagger documentation both use the unprefixed form, which is what this page uses.
  • Publishing is live unless the agent asks otherwise. preview defaults to false.
  • Overwriting is the default for AI fixes. standardize_api and patch_api both overwrite the current version unless a new version is supplied.
  • Functional Testing tools issue arbitrary HTTP requests. They are gated on a separate token and absent without it. With it, create_test plus run_test is a general-purpose HTTP client with attacker-controllable URL, method, headers and body.
  • AI calls have no published rate and no accounting tool. Nothing in the surface can observe what an AI generation or standardisation costs before or after the call.
  • Content-type combinations are restricted. SmartBear documents that external HTML documents cannot be edited through the API, and that one source-and-type combination returns an error when creating a page with content.
  • The documentation URL fails without cookies. Anthropic's nominated doc URL redirects into a silent-login loop that exhausts 50 redirects for a plain client; it returns 200 with a cookie jar. A previous check recorded this connector as having dead documentation. The server and the docs are both live — the failure was in the fetch, not the vendor.
  • The documentation page is JavaScript-rendered. A text extractor recovers 1,026 words of navigation chrome and no content. The prose lives in a React Router data payload served from the same path with a .data suffix, which is where the tool tables on this page come from.

Frequently asked questions

Can the Swagger connector publish something the public can see?

Yes, and that is its default behaviour. The publish_portal_product tool takes a preview boolean that SmartBear's source defaults to false, meaning live publication. A single call makes a product's current draft content visible to portal visitors. Preview mode exists but the agent has to ask for it, so an unqualified instruction publishes.

Does the Swagger MCP server let an agent make arbitrary HTTP requests?

Yes, through the Functional Testing tools. SmartBear documents that create_test accepts request steps with URL, HTTP method, headers and body, and run_test executes them. There is no allowlist tying a test to your own APIs. This makes the verb census misleading, because two tools reach any host the runner can route to.

How many tools does the Swagger MCP server actually have?

Thirty-eight, not the 22 Anthropic's directory lists. SmartBear's open-source repository defines 27 Swagger tools plus 11 Functional Testing tools at release v0.37.0. The directory's 22 names all appear in that set, so nothing is fabricated, but five Swagger tools and all 11 testing tools are missing from the listing.

What OAuth permissions does the Swagger MCP server request?

Four scopes, none of which narrow anything. SmartBear's authorization server at auth.swaggerhub.com advertised openid, profile, email and offline_access on 2026-08-22. All four are OpenID identity claims. Nothing at the OAuth grant separates reading an API definition from publishing a portal or deleting a product.

Can the Swagger connector delete anything?

Yes, two tools delete. delete_portal_product removes a product from a portal, and delete_table_of_contents removes a navigation entry. SmartBear documents that the second is a soft delete that also removes the associated document content, and that it supports recursive deletion of nested items via a recursive flag.

Will standardize_api overwrite my API definition?

Yes, unless you pass a new version. SmartBear documents that standardize_api sends findings to SmartBear AI, saves the corrected definition back to the registry, and that omitting the newVersion argument overwrites the current version. The docs recommend supplying a patch bump instead. The same overwrite applies to patch_api.

What does the Functional Testing tunnel agent reach?

Whatever network the tunnel is deployed into. SmartBear's schemas accept a tunnelAgentName on both suite creation and suite runs, overriding each test's saved tunnel. A tunnel agent exists to reach APIs that are not publicly routable, so a test run through one reaches internal hosts your agent could not otherwise call.

Why does VS Code fail to sign in to the Swagger MCP server?

Because its cached OAuth dynamic client registration expired. SmartBear's troubleshooting page names the error as unknown or expired client_id and gives the fix: open the Command Palette, run Authentication Remove Dynamic Authentication Providers, remove the stale provider, then restart VS Code and sign in again. SmartBear links VS Code issue 250960.

Sources

More Developer Tools connectors

  • Base44

    Build and edit Base44 apps from an AI assistant, and query data your app's users submit.

  • CircleCI

    Diagnose failed builds, read job logs, inspect test results and rerun or roll back deployments from your AI assistant.

  • Claude Managed Agents

    Create, run, monitor and debug Anthropic's Claude Managed Agents from inside Claude itself.

Browse all MCP connectorsClaude and ChatGPT setup guideBrowse AI skills

Product names and logos belong to their owners. Agentman is not affiliated with a connector's maker unless the page says the connector is built and run by Agentman.

Use it in an agent

Put Swagger to work.

Connect Swagger once and your agents call these tools on their own: on a schedule, in a workflow, with nobody at the keyboard.

Open in Agentman Studio
Call (650) 285-1019Our AI receptionist answers.