Source definition
Stripe OpenAPI
Discovery owns operations, schemas, descriptions, and stable tool identity. It does not need an account credential.
Connect APIs and MCP servers once.
Bring OpenAPI 3 or Swagger 2 documents, GraphQL introspection endpoints, and remote Streamable HTTP MCP servers into one searchable catalog.
Three source types, one catalog
Import OpenAPI 3 or Swagger 2 from JSON or YAML. Operations, descriptions, input schemas, and source safety hints become stable catalog tools.
- * Reuse one definition across multiple connections
- * Refresh only after the replacement catalog succeeds
- * Tombstone removed operations to preserve history
Define once, connect deliberately
Named connection
Production
Account endpoint, encrypted credentials, and environment context.
Named connection
Sandbox
A separate account and secret using the same discovered source.
Connections can represent accounts, environments, regions, or any boundary an operator wants an agent to select explicitly.
Credentials stay on the host
Attach at invocation
- * Bearer tokens
- * API keys
- * Basic credentials
- * Custom header or query values
Never hand them to code
Values are encrypted with AES-256-GCM before persistence. Reads return only a hint; plaintext is attached only while the host constructs an approved request.