by HelpCode-ai
Open-source, self-hosted MCP gateway: turn any REST/OpenAPI, SOAP, GraphQL, OData or SQL API into MCP tools for Claude, ChatGPT & Copilot. 331 connectors incl. SAP S/4HANA & Business One, ERP, e-commerce.
# Add to your Claude Code skills
git clone https://github.com/HelpCode-ai/anythingmcpLast scanned: 5/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@hono/node-server: @hono/node-server: Middleware bypass via repeated slashes in serveStatic",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@opentelemetry/auto-instrumentations-node: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-logs-otlp-grpc: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-logs-otlp-http: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-logs-otlp-proto: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-metrics-otlp-grpc: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-metrics-otlp-http: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-metrics-otlp-proto: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-trace-otlp-grpc: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-trace-otlp-http: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/exporter-trace-otlp-proto: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/otlp-exporter-base: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/otlp-grpc-exporter-base: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/otlp-transformer: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@opentelemetry/sdk-node: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@prisma/dev: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@sentry/nextjs: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "next: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "prisma: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "protobufjs: protobuf.js: Code injection through bytes field defaults in generated toObject code",
"severity": "high"
},
{
"type": "npm-audit",
"message": "qs: qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-05-30T16:58:21.602Z",
"npmAuditRan": true,
"pipAuditRan": true
}See how anythingmcp compares with popular alternatives.
anythingmcp is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by HelpCode-ai. Open-source, self-hosted MCP gateway: turn any REST/OpenAPI, SOAP, GraphQL, OData or SQL API into MCP tools for Claude, ChatGPT & Copilot. 331 connectors incl. SAP S/4HANA & Business One, ERP, e-commerce. It has 729 GitHub stars.
anythingmcp returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/HelpCode-ai/anythingmcp" and add it to your Claude Code skills directory (see the Installation section above).
anythingmcp is primarily written in TypeScript. It is open-source under HelpCode-ai on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh anythingmcp against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
One question in Claude, answered from Etsy, SAP and a logistics API.
https://github.com/user-attachments/assets/cc8c9ef3-11cf-4eab-aa4d-98472dc554b3
Requires Docker 24+ and openssl; on macOS, start Docker Desktop first. No clone needed:
mkdir anythingmcp && cd anythingmcp
curl -fsSLo docker-compose.yml \
https://raw.githubusercontent.com/HelpCode-ai/anythingmcp/main/docker-compose.quickstart.yml
printf 'JWT_SECRET=%s\nENCRYPTION_KEY=%s\n' "$(openssl rand -hex 32)" "$(openssl rand -hex 32)" > .env
docker compose up -d
Open http://localhost:3000 and register: the first account becomes admin. Your MCP endpoint is http://localhost:4000/mcp, the API docs are at http://localhost:4000/api/docs.
Keep the generated
.env.ENCRYPTION_KEYdecrypts the credentials you store. Lose it and every connector has to be re-credentialed.
On amd64 the image pulls in about 30 s and the API is healthy 24 s later. The image is amd64 only for now; the compose file pins the platform, so it also runs on Apple Silicon under emulation.
The quickstart binds to 127.0.0.1 on purpose, because nothing in front of it terminates TLS. For an instance other people or a cloud AI client can reach, clone the repo and run ./setup.sh: it asks for a domain, gets certificates through Caddy, generates the secrets and sets the MCP auth mode. See the Deployment Guide.
AnythingMCP Cloud is the same AGPL code, operated by us in Frankfurt, Germany, with a 7-day free trial. Start there to try it on your own APIs, and move it in-house when you want the credentials to stop travelling; the connectors are the same either way. DPA/AVV on request via info@helpcode.ai. SSO and SCIM are self-hosted only.
Most companies have no MCP servers yet. They have a REST API, an ERP, a SOAP service from 2009 and a database. Each of them becomes a set of MCP tools:
| Source | What you get | Docs |
|---|---|---|
| OpenAPI / Swagger (REST) | Import a spec by URL or paste it; every operation becomes a tool with parameters, auth and endpoint mapping filled in | REST · guide · demo: openapi-to-mcp |
| Postman collection, cURL | Folders, auth, body modes and {{variables}} carry over; every request becomes a tool |
Postman import |
| SOAP / WSDL | Each operation becomes a tool; envelopes, parameter order and WCF services are handled for you | SOAP · guide · demo: soap-to-mcp |
| GraphQL | Introspection turns queries and mutations into tools, or you define the operations yourself | GraphQL · guide |
| OData (SAP Gateway included) | Reads each service's $metadata, so the model sees entity sets, keys and SAP's business labels; V2 and V4 |
OData · guide |
| SQL and MongoDB | PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SAP HANA, SQLite and MongoDB: schema, example and query tools, read-only by default | Database · SAP HANA · guide · demo: sql-to-mcp |
| Another MCP server | Discover its tools and serve them next to your own, behind the same auth and audit | MCP bridge |
Tools register at runtime, without a restart. Per-connector {{VAR}} values are interpolated on the server and never shown to the AI.
359 adapters, exposing 2,400+ tools. Every one has a setup guide on anythingmcp.com/guides, in seven languages.
| Category | Examples |
|---|---|
| 💼 ERP, accounting & invoicing | SAP Business One, SAP S/4HANA, Odoo, weclapp, Xentral, Dynamics NAV, Lexware Office, sevDesk, Exact Online, bexio |
| 🛍️ E-commerce & marketplaces | Amazon Seller, WooCommerce, Shopware 6, Magento, eBay, Etsy, Kaufland, OTTO, Oxomi |
| 📦 Logistics & shipping | Deutsche Bahn, DHL, DPD, GLS, Shipcloud, Sendcloud |
| 👥 HR & field service | Personio, HRWorks, Kenjo, MFR Mobile Field Report |
| 🏛️ Government & public data | VIES VAT, Handelsregister, UK Companies House, DESTATIS, Bundesbank, OpenPLZ, NINA |
| 🏦 Banking & payments | Revolut Business, Wise, PAYONE, Razorpay, Paystack |
| 💬 Messaging | WhatsApp, LINE, TeamViewer |
| 📈 Advertising & analytics | Google Ads, Google Analytics 4, Google Search Console, Matomo |
| 🧠 AI decision models | Jev by TypeSafe: yes/no, classification and scoring with probabilities, in about 300 ms |
| System | Market | Tools | What the AI can do |
|---|---|---|---|
| SAP Business One | Global | 24 | Business partners, items, sales documents, A/P invoices, payments, journal entries, chart of accounts, bank reconciliations; create sales orders |
| SAP S/4HANA Cloud | Global | 15 | Business partners, sales and purchase orders, billing documents, deliveries, journal entries |
| SAP S/4HANA (HANA SQL) | Global | 10 | S/4HANA on-premise and Private Cloud read straight from HANA, with SAP's data dictionary and CDS views as tools; read-only |
| [SAP S/4HANA (O |