Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 1
- 4 3
- 3 2
- 2 0
- 1 0
Trust in production
- Trust it - 17%
- With caveats - 67%
- Wouldn't - 17%
83% would recommend this server
How reviewers scored it
- Setup & docs 3.8
- Auth experience 4.0
- Reliability 3.8
- Maintainer responsiveness 3.3
Why it got a B
OneSimpleAPI's own hosted server, using the same APIs, permissions and credits as its REST API. The endpoint refuses requests without a token. OAuth access tokens are short-lived and refresh tokens rotate, and you can disconnect an app or delete a key from your account. Tools can create and delete files and short links and send PDF signature requests, so keep approval on for those, and calls can use up paid credits. No advisories on record. Biggest deduction: OAuth, the default, grants one scope covering every tool. To limit which APIs an agent can reach, connect with an API key and pick its permissions instead.
How to connect
// .cursor/mcp.json
{ "mcpServers": { "onesimpleapi": { "url": "https://onesimpleapi.com/mcp" } } }claude mcp add --transport http onesimpleapi https://onesimpleapi.com/mcpIs OneSimpleAPI MCP Server safe?
Is OneSimpleAPI MCP Server safe to use?
OneSimpleAPI MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Updates are occasional, so fixes may be slow to arrive.
Does OneSimpleAPI MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does OneSimpleAPI MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Developer Tools
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
- A GitLab MCP ServerGitLab's built-in MCP server for projects, merge requests, work items, code, and CI pipelines, on GitLab.com or your own instance.
Embed this badge
[](https://trustedmcp.io/servers/onesimpleapi-mcp)<a href="https://trustedmcp.io/servers/onesimpleapi-mcp"><img src="https://trustedmcp.io/badge/onesimpleapi-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Saves me a context switch every hour
Replaced a homegrown script with OneSimpleAPI MCP Server and have not looked back. Auth is handled properly, and revoking access later was one click. Gave it its own API key so I can revoke it without breaking anything else. Nothing to install, I just point the client at the URL.
Used for Code review summaries for pull requests
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Surprisingly polished
Simple to set up in Cursor, simple to reason about. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Generating boilerplate from existing patterns
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Tried it on a side project first, then rolled it out at work. Token setup is the fiddliest part, after that it is smooth. Sign-in flow was painless and I never had to paste a key into a config file. I would use it in prod, but only with a human approving writes.
Used for Letting a coding agent open and triage issues
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 3/5
Promising, a bit raw
Some tools are great, a couple feel half finished. Sign-in flow was painless and I never had to paste a key into a config file. The API key sits in the config file, so I made a dedicated key with minimal permissions. For anything real I would look elsewhere.
Used for Onboarding new devs with an agent that answers repo questions
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 3/5
OK for read-only work
Good for experimenting, still deciding about production. Scoped the token to just what the agent needs and it respected that. Narrowing the scopes took ten minutes and made me much happier running it. Fine in production if you sandbox it.
Used for Internal developer assistant
- Setup & docs 2/5
- Auth experience 4/5
- Reliability 2/5
- Maintainer responsiveness 3/5
Our team uses it every day
Clear tool names, sensible outputs, very few surprises. The scope options are worth reading carefully, the defaults are broader than I wanted.
Used for Scripting routine maintenance tasks
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.