spectral-mcp 0.3.1

Automatically discover and document web application APIs

Install · Why Spectral · How it works · Documentation · Website

AI agents shouldn't need a browser. Mobile and web apps talk to APIs all day — Spectral gives that same access to your AI agents.

Why Spectral

Most apps — web, mobile, desktop — sit on top of undocumented HTTP APIs. Spectral records the traffic while you browse, uses an LLM to understand what each call does, and generates MCP tools that any AI agent can call.

• Works everywhere. Websites, mobile apps (Android), desktop apps, CLI tools — if it speaks HTTPS, Spectral can capture it.

• Understands what you do, not just what the network sends. Spectral correlates your clicks and navigation with API calls to figure out the business meaning of each endpoint — not just its shape.

• Tools that fix themselves. When a generated tool fails at runtime, the MCP server feeds the error back to an LLM and patches the tool automatically.

• LLM at build time, not at runtime. The LLM is only used during analysis and self-repair. Once your tools work, every call is a direct HTTP request — fast, cheap, and deterministic.

• Faster than browser automation. No headless browser, no fragile selectors, no waiting for pages to render. Spectral tools call the API directly, which is orders of magnitude faster and more reliable than controlling a browser with an agent.

• Also generates API specs. Beyond MCP tools, Spectral can produce OpenAPI 3.1 specs from REST traffic and GraphQL SDL schemas from GraphQL traces — useful for documentation, code generation, or feeding other tools.

Install

The install script sets up Spectral, installs shell completions, and ensures your PATH is configured:

curl -LsSf https://getspectral.sh/install.sh | bash

If you prefer managing packages yourself, you can install directly with pip or uv — but you will need to set up shell completions manually:

pip install spectral-mcp
# or
uv tool install spectral-mcp

You also need an Anthropic API key — Spectral will prompt for it on first analysis.

See the documentation for setup guides, capture instructions, and CLI reference.

How it works

1. Capture — Chrome extension (web) or MITM proxy records traffic while you use the app
2. Analyze — An LLM correlates your actions with API calls, infers endpoint patterns, and business meaning
3. Authenticate — The CLI detects the auth flow and generates a login script. Run it once; the MCP server refreshes automatically
4. Use — Start the MCP server. AI agents call the API directly

License

MIT