Security-first MCP server that connects any OpenAPI, GraphQL, gRPC or SOAP API to AI agents.
Connect Runs on your machine
claude mcp add universal-connector-mcp -e UCMCP_ALLOWED_HOSTS=<UCMCP_ALLOWED_HOSTS> -e UCMCP_APIS_CONFIG=<UCMCP_APIS_CONFIG> -e UCMCP_CACHE_TTL=<UCMCP_CACHE_TTL> -e UCMCP_BLOCK_PRIVATE_IPS=<UCMCP_BLOCK_PRIVATE_IPS> -e GITHUB_TOKEN=<GITHUB_TOKEN> -- uvx universal-connector-mcp==0.2.0
{
"mcpServers": {
"universal-connector-mcp": {
"command": "uvx",
"args": [
"universal-connector-mcp==0.2.0"
],
"env": {
"UCMCP_ALLOWED_HOSTS": "<UCMCP_ALLOWED_HOSTS>",
"UCMCP_APIS_CONFIG": "<UCMCP_APIS_CONFIG>",
"UCMCP_CACHE_TTL": "<UCMCP_CACHE_TTL>",
"UCMCP_BLOCK_PRIVATE_IPS": "<UCMCP_BLOCK_PRIVATE_IPS>",
"GITHUB_TOKEN": "<GITHUB_TOKEN>"
}
}
}
}
{
"mcpServers": {
"universal-connector-mcp": {
"command": "uvx",
"args": [
"universal-connector-mcp==0.2.0"
],
"env": {
"UCMCP_ALLOWED_HOSTS": "<UCMCP_ALLOWED_HOSTS>",
"UCMCP_APIS_CONFIG": "<UCMCP_APIS_CONFIG>",
"UCMCP_CACHE_TTL": "<UCMCP_CACHE_TTL>",
"UCMCP_BLOCK_PRIVATE_IPS": "<UCMCP_BLOCK_PRIVATE_IPS>",
"GITHUB_TOKEN": "<GITHUB_TOKEN>"
}
}
}
}
{
"servers": {
"universal-connector-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"universal-connector-mcp==0.2.0"
],
"env": {
"UCMCP_ALLOWED_HOSTS": "<UCMCP_ALLOWED_HOSTS>",
"UCMCP_APIS_CONFIG": "<UCMCP_APIS_CONFIG>",
"UCMCP_CACHE_TTL": "<UCMCP_CACHE_TTL>",
"UCMCP_BLOCK_PRIVATE_IPS": "<UCMCP_BLOCK_PRIVATE_IPS>",
"GITHUB_TOKEN": "<GITHUB_TOKEN>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
UCMCP_ALLOWED_HOSTSOptional | Comma-separated extra hosts allowed for outbound calls (spec hosts are allowed automatically). |
UCMCP_APIS_CONFIGOptional | Path to a YAML file of APIs to preload at startup. |
UCMCP_CACHE_TTLOptional | TTL in seconds for caching read-only responses (default 60, 0 disables). |
UCMCP_BLOCK_PRIVATE_IPSOptional | Block outbound calls to private/loopback/link-local/cloud-metadata IPs (SSRF protection). Default true. |
GITHUB_TOKENOptional, secret | Example credential convention: <API_NAME>_TOKEN / <API_NAME>_API_KEY are injected for the API loaded under that name. |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 23 Jul 2026 |
| Last updated | 23 Jul 2026 |
| Registry name | io.github.TeodorMCP/universal-connector-mcp |
More developer tools servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
