This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Summary
AI summaryAdded tools to convert OpenAPI and GraphQL specs into callable operations.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds support for OpenAPI specs as tools via `/mcp add <name> --spec` command. Adds support for OpenAPI specs as tools via `/mcp add <name> --spec` command. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Medium |
Adds support for GraphQL endpoints as tools via `/mcp add <name> --graphql` command. Adds support for GraphQL endpoints as tools via `/mcp add <name> --graphql` command. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Allows YAML OpenAPI specs when `PyYAML` is installed. Allows YAML OpenAPI specs when `PyYAML` is installed. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Exposes each OpenAPI operation as a tool, converting path/query/body params to arguments. Exposes each OpenAPI operation as a tool, converting path/query/body params to arguments. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Auto-generates selection sets for GraphQL query/mutation return types using scalar fields. Auto-generates selection sets for GraphQL query/mutation return types using scalar fields. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Reuses existing auth flags (`--bearer`, `--header`, `env:`, `file:`) for both OpenAPI and GraphQL tools. Reuses existing auth flags (`--bearer`, `--header`, `env:`, `file:`) for both OpenAPI and GraphQL tools. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Displays tool kind as `[openapi]` or `[graphql]` in `/mcp list` output. Displays tool kind as `[openapi]` or `[graphql]` in `/mcp list` output. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
| Feature | Low |
Integrates OpenAPI and GraphQL tools with lazy mode and TOON like other tool sources. Integrates OpenAPI and GraphQL tools with lazy mode and TOON like other tool sources. Source: granite4.1:30b@2026-06-07-audit Confidence: low |
— |
Full changelog
Turn any REST or GraphQL API into tools — no code generation.
Added
- OpenAPI specs as tools —
/mcp add <name> --spec <url|file> [--base-url U]. Kodiqa reads the spec and exposes one tool per operation (path/query/body params become the tool's arguments); calling a tool issues the HTTP request. JSON specs work out of the box; YAML ifPyYAMLis installed. - GraphQL endpoints as tools —
/mcp add <name> --graphql <url>. Kodiqa introspects the schema, exposes each query/mutation as a tool, auto-generates a selection set of the return type's scalar fields, and sends parameterized queries. - Both reuse the existing auth flags (
--bearer,--header,env:/file:), show their kind in/mcp list([openapi]/[graphql]), and work with lazy mode and TOON like any other tool source.
Tests
test_api_tools.py— spec/introspection parsing plus real in-process HTTP servers for OpenAPI (path/query/body) and the GraphQL introspect→query flow. 452 total; ruff + CI green.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Kodiqa Agent
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]