HelpCode-ai/anythingmcp 是一个托管在 GitHub 上的开源项目，主要使用 TypeScript 编写，采用 GNU Affero General Public License v3.0 许可证，目前获得 756 个 Star、125 次 Fork。
仓库全名
HelpCode-ai/anythingmcp
开源许可证
GNU Affero General Public License v3.0
Star 数
756
Fork 数
125
未关闭 Issue
44
README 摘要
AnythingMCP: the open-source MCP gateway that becomes your company brain English · Deutsch · 简体中文 · 日本語 AnythingMCP is an open-source, self-hosted MCP gateway that connects Claude, ChatGPT, Copilot and Gemini to the software your company runs and to the documents on your file servers, without writing an MCP server. On top of the gateway it keeps your company brain: a knowledge graph of how your systems connect, AI…
AnythingMCP is an open-source, self-hosted MCP gateway that connects Claude, ChatGPT, Copilot and Gemini to the software your company runs and to the documents on your file servers, without writing an MCP server.
On top of the gateway it keeps your company brain: a knowledge graph of how your systems connect, AI skills and company memory, shared by every AI client and limited by each user's role.
713 ready connectors with 12,000+ tools, among them SAP, Odoo, weclapp and Amazon Seller; 35 need no API key.
16,000+ workspaces on AnythingMCP Cloud · 1.5M+ AI tool calls a month · listed in the official Claude directory and the ChatGPT Plugin Directory
A gateway forwards calls. A company brain also knows where your documents are, how your systems connect and what your company has already decided. AnythingMCP gives every AI client both, through one MCP endpoint:
What it does
Edition
Every system, one endpoint
696 catalog connectors, or your own REST/OpenAPI, SOAP, GraphQL, OData, SQL, IMAP/SMTP or MCP source. Tools register at runtime. Connectors
All
File Search
Indexes SFTP, FTP/FTPS, WebDAV (Nextcloud, NAS), S3 or a network share: every PDF page, Excel rows with their column names, Word, PowerPoint, Outlook mails with attachments. The AI answers with file, page and date. File Search
Cloud; self-hosted Enterprise
File Share
Temporary download links for files from your folders, or for files the AI writes (a CSV export, a report), internal or public, with expiry and revoke. File Share
Cloud; self-hosted Enterprise
Company memory
Facts and preferences saved from one AI client and found again in any other: said once in Claude, used by Copilot. Personal and company scopes, with folders and role limits. Memory
Enterprise
AI skills
The procedures your agents follow, written by hand or learned from real requests and fixed errors, approved by an admin. AI skills
All
Knowledge graph
How your systems connect, so the agent links a customer in one system to their orders in another without being told. Knowledge Graph
All
Code Mode
One short program that calls several tools in an isolated sandbox with no secrets and no network, so a five-step lookup becomes one call. Code Mode
All; write access Enterprise
Governance
Roles and per-tool permissions, response mapping that drops fields before they reach the model, an audit log of every call. SSO and SCIM from your directory. Security
All; SSO/SCIM Enterprise
The self-hosted Community edition is free under AGPL-3.0 for any use, including commercial use, for up to 3 active users, with unlimited connectors and MCP servers. More users, single sign-on, SCIM, File Search beyond the 30-day trial and support come with Enterprise, on request: contact us. Administrators can try single sign-on and SCIM for 30 days under Settings → License. Existing Starter and Team licence keys keep working.
Run it yourself
Requires Docker 24+ and openssl; on macOS, start Docker Desktop first. No clone needed:
Open http://localhost:3000 and register: the first account becomes admin. Your MCP endpoint is http://localhost:4000/mcp, the API docs are at http://localhost:4000/api/docs.
Keep the generated .env.ENCRYPTION_KEY decrypts the credentials you store. Lose it and every connector has to be re-credentialed.
On amd64 the image pulls in about 30 s and the API is healthy 24 s later. The image is amd64 only for now; the compose file pins the platform, so it also runs on Apple Silicon under emulation.
The quickstart binds to 127.0.0.1 on purpose, because nothing in front of it terminates TLS. For an instance other people or a cloud AI client can reach, clone the repo and run ./setup.sh: it asks for a domain, gets certificates through Caddy, generates the secrets and sets the MCP auth mode. See the Deployment Guide.
Other ways to run it: managed cloud, Railway, DigitalOcean
AnythingMCP Cloud is the same AGPL code, operated by us in Frankfurt, Germany, with a 7-day free trial. Start there to try it on your own APIs, and move it in-house when you want the credentials to stop travelling; the connectors are the same either way. DPA/AVV on request via [email protected]. SSO and SCIM are self-hosted only, with an Enterprise licence.
How it works
Add a connector. Install an adapter from the catalog (a ready JSON definition for SAP, Odoo, DHL and the rest), or point AnythingMCP at your own OpenAPI spec, WSDL, GraphQL endpoint, Postman collection or database. Once configured in your workspace it is a connector, and each of its operations is an MCP tool.
Decide what the model sees. Rename and describe the tools in the visual editor, drop the fields that must not leave your network, and choose which roles may call which tools.
Hand one URL to your AI client. An MCP server is the endpoint you add to Claude, ChatGPT, Copilot, Gemini or Cursor. It exposes the connectors you assign to it, and nothing else.
Connect any API, SOAP service or database
Most companies have no MCP servers yet. They have a REST API, an ERP, a SOAP service from 2009 and a database. Each of them becomes a set of MCP tools:
Source
What you get
Docs
OpenAPI / Swagger (REST)
Import a spec by URL or paste it; every operation becomes a tool with parameters, auth and endpoint mapping filled in
Any mailbox (IONOS, Strato, GMX, T-Online, Gmail with an app password, your own mail server): list folders, search, read with attachments, flag, move, save drafts and send
Tools register at runtime, without a restart. Per-connector {{VAR}} values are interpolated on the server and never shown to the AI.
Connector catalog
713 adapters, exposing 12,000+ tools. Every one has a setup guide on anythingmcp.com/guides, in seven languages. The full catalog by category lists every Cloud connector with links to its guides for Claude, ChatGPT, Copilot, Cursor and Gemini.
Category
Examples
💼 ERP, accounting & invoicing
SAP Business One, SAP S/4HANA, Odoo, weclapp, Xentral, Dynamics NAV, Lexware Office, sevDesk, Exact Online, bexio
† Built from the vendor’s published API documentation and not yet exercised against a live tenant. If you run one of these, a report or a fix is very welcome.
An adapter is a single JSON file. That is why the catalog is this size, and why adding one is a reasonable first contribution. Missing yours? Request it (we prioritise by 👍) or build it. Your ERP isn’t listed, or it’s a custom build? Connect its REST API, its SOAP services or its SQL database directly, read-only.
Security and governance
Everything runs on your infrastructure, so you decide what leaves it. OAuth2, roles, per-tool permissions, response mapping and the audit log are in every edition; SSO and SCIM need an Enterprise licence (a 30-day trial is built in).
Response mapping. Each tool declares exactly which fields reach the model: drop a customer’s IBAN or an employee’s salary, or name the fields to keep. The editor shows the before/after on a real response; a shipped adapter goes from 12,172 B to 1,072 B (−91%), so you also stop paying for those fields in the context window. A broken mapping returns the raw response by default; set "fallbackToRaw": false on tools whose fields must never travel, and the call fails instead.
Read-only where it matters. Every tool carries MCP annotations (readOnlyHint, destructiveHint), derived from the operation and overridable per tool. Role-based tool whitelisting lets you publish an MCP server that can only read, which is how most people should start with an ERP. Database query tools run a single SELECT and block writes and stacked statements.
Every auth scheme you will meet. OAuth2 (PKCE and Client Credentials), Bearer, API key, Basic, HMAC request signing, LOGIN_TOKEN and OAuth 1.0a. Credentials are encrypted at rest with AES-256-GCM.
Audit log. Every tool call is recorded with input, output, duration and status in your own database, including the full upstream response the model never saw.
SSO and SCIM (Enterprise). Entra ID, Google, Okta, Auth0 or any OIDC provider. Roles sync from your directory groups on every sign-in; disable someone in the directory and their workspace access and MCP API keys go with it.
The same MCP server works in every client that speaks MCP, so you build a connector once:
Claude. Add the server URL as a custom connector under Customize → Connectors; it then works in Claude.ai, Claude Desktop and Claude Code. OAuth 2.0 is supported out of the box. On AnythingMCP Cloud you can also add it in one click from the Claude Directory. Claude setup
ChatGPT. On AnythingMCP Cloud, the AnythingMCP plugin in the ChatGPT Plugin Directory answers questions from your company databases, read-only. For every connector, add the server under Plugins in ChatGPT (Add → Add custom MCP server), or use it as the tool layer of an Apps SDK app. ChatGPT setup
Meta Muse. In Muse, open Settings → Connectors → Add custom connector, paste the server URL and sign in to AnythingMCP. Muse setup
Company brain: knowledge graph, AI skills and memory
Forwarding calls leaves the hard part to the agent: knowing which tool to call next, and what your business means by “open order”. AnythingMCP learns both and hands them back as context, not as extra tool calls.
Knowledge Graph. A per-workspace map of entities (customers, orders, products) and how they relate across connectors, built from tool definitions and real calls, and editable by hand. It stores field names and relationships, never values. Each server exposes it through a kg_how_to_obtain tool, so the agent can ask how to get from a Shopware order to a DHL tracking number.
AI skills. Recurring usage turned into small rules (“today’s revenue includes order statuses 2, 3 and 4”) and step-by-step procedures, written by hand or learned from real requests and fixed errors, versioned, and approved by an admin before they are composed into the server’s instructions.
Company memory (Enterprise). AI clients save facts, preferences and notes with memory_save and find them again with memory_search, in any client connected to the workspace. My memory stays private to one user; company memory (“STAMMKUNDE means a customer with a framework agreement”) is for everyone, in folders limited by role. It is served as information written by people, never as instructions. Memory guide
Change the assistant, keep the brain: Copilot today, Claude tomorrow, an n8n agent tonight all find the same graph, skills and memory.
The AI passes are off by default and use your own OpenAI, OpenRouter or Anthropic key; the graph, the editor and the MCP tool work without one. Knowledge Graph guide
Where it fits
Most MCP gateways federate and secure MCP servers you already have. AnythingMCP starts one step earlier: it creates the MCP servers from the APIs, ERPs and databases you already run, then serves, scopes and audits them behind one endpoint. If your tools are already MCP servers and all you need is federation, a pure gateway may be enough. Side-by-side comparisons: anythingmcp.com/vs.
FAQ
What is an MCP gateway?
A single MCP endpoint in front of many tools, which handles authentication, access control and audit for all of them. AI clients such as Claude and ChatGPT connect to the gateway instead of to each system. AnythingMCP is a gateway that also generates the tools, from APIs and databases that have no MCP server of their own.
How do I connect my ERP (SAP, Odoo, Xentral…) to Claude or ChatGPT?
Install the ERP’s adapter from the catalog, enter the API credentials, and add your MCP server URL to Claude as a custom connector or to ChatGPT as an app. If your ERP has no adapter, connect its REST or SOAP API or its SQL database directly. Start with a role that can only read.
How do I turn an OpenAPI spec into an MCP server?
Create a REST connector and import the spec by URL or by pasting it. Every operation becomes an MCP tool on your server’s /mcp endpoint, with no code. How it works
Can I connect a SOAP/WSDL service to Claude?
Yes. AnythingMCP parses the WSDL, turns each operation into a tool and builds the SOAP envelope on every call, WCF services included. It authenticates with HTTP Basic, Bearer, an API-key header or a WS-Security UsernameToken; signed WS-Security messages are not supported yet. SOAP connector docs
Can Claude query my SQL Server, Oracle or PostgreSQL database safely?
Query tools are read-only by default. On top of that, use a database user with SELECT rights only, prefer static queries where the model supplies just the parameters, and whitelist the tools per role. Response mapping drops the columns that must not reach the model, and every query lands in your audit log.
How do I let Claude or ChatGPT search the documents on our file server?
Add a File Search connector and point it at the folder over SFTP, FTP/FTPS, WebDAV (Nextcloud, ownCloud, Synology or QNAP NAS), S3 or a mounted network share. AnythingMCP indexes PDFs page by page, Excel rows with their column names, Word, PowerPoint and Outlook mails, keeps the index in sync, and gives every AI client search, find, grep and read tools that answer with file, page and date. Folder permissions per role are available on Enterprise. File Search docs
Can ChatGPT, Claude and Copilot share the same company memory?
Yes. With workspace memory (Enterprise), anything saved from one AI client is found by the others, because the memory lives in AnythingMCP, not in the client. Personal items stay private to their author; company items are shared within folder and role limits. Memory docs
What is a company brain for AI agents?
The knowledge an AI needs beyond tool access: where your documents are, how your systems link (the knowledge graph), how your company works (AI skills) and what it has decided (company memory). AnythingMCP keeps all of it in your own instance and serves it to every MCP client within each user’s role.
Can an AI agent run code against my tools safely?
With Code Mode, a short JavaScript program calls several tools in one step. It runs in a separate code-runner container with no filesystem, network, environment or secrets; it can only call the tools the user may already use, and every inner call is governed and audited like a direct one. It is off until an operator enables it. Code Mode docs
How do I connect Shopware, WooCommerce or Amazon Seller Central to Claude?
Install the e-commerce adapter for your shop or marketplace and authorise it. WooCommerce comes with 49 tools, Amazon Seller Central uses the official Selling Partner API, and the Shopware 6 adapter reads the storefront catalog through the Store API.
Community and support
In production at KOCH Freiburg GmbH, where it connects AI assistants to 15+ internal systems: ERP, CRM, SOAP services and on-prem databases. helpcode.ai extracted it from that system and open-sourced it, because an adapter catalog grows faster as a community than as a product.
💬 Questions and ideas:GitHub Discussions. Vote on the next adapter, share what you’ve built.
🏢 Built by helpcode.ai in Freiburg, Germany. AI-assisted development, human-reviewed: AUTHORS.md says which parts and how.
Contributing
Read the Contributing guide before opening a PR. The easiest useful contribution is an adapter: one JSON file, and there is a walkthrough issue for it.
License
Open source under the GNU Affero General Public License v3 (AGPL-3.0-only). Commercial use inside your own company is included and always was; the copyleft obligation only starts if you modify AnythingMCP and offer the modified version to others over a network. Code under ee/ (Cloud operations, the File Search sync engine, edition licensing) is under the AnythingMCP Commercial License and is not required to run the gateway; see the License FAQ.
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)
评论