---

MCP REST Bridge is an open-source MCP gateway / proxy / aggregator for the Model Context Protocol (negotiates the MCP protocol version via the official SDK, which supports 2024-10-07 through 2025-11-25 and defaults to 2025-03-26 when a client sends none). Point it at an OpenAPI/Swagger spec, a GraphQL endpoint, a curl command or a Postman collection and it turns your API into MCP tools automatically. Register an existing MCP server and it re-exposes it through the same governed pipeline. Every call runs through SSRF protection, prompt-injection sanitizing, per-tool rate limits, circuit breakers, RBAC and a tamper-evident audit log — and you manage all of it from a built-in admin UI, not a pile of YAML. Tested against Claude Desktop, Cursor, and custom MCP agents.

🔌 Convert anything to MCP

Six ways to turn a backend into governed MCP tools — one POST /register call, then every call runs through the same guard pipeline:

Your backend	Register with	Becomes
REST API (OpenAPI / Swagger)	openapi_url	one MCP tool per operation
GraphQL API	graphql_url	one tool per query & mutation
A curl command	curl_input	one tool from the request
Postman collection (v2.1)	postman_collection	one tool per request
No spec — hand-written	tools[]	exactly the tools you define
Existing MCP server	kind: "mcp" + mcp_url	its tools, re-exposed & governed

See Registering backends → for the payload of each, and Bundles → to serve several backends through one endpoint.

✨ Why MCP REST Bridge