API Reference

The mpak registry API provides programmatic access to package metadata, search, and download URLs. The full OpenAPI specification is available at registry.mpak.dev/docs.

Base URL

https://registry.mpak.dev

Interactive API documentation (Swagger UI) is available at:

https://registry.mpak.dev/docs

Authentication

Operation	Auth Required
Search, show, download	No
Announce (publish)	GitHub OIDC token

Read operations require no authentication. Publishing uses GitHub OIDC tokens automatically via the mcpb-pack GitHub Action. See Access Model for details.

Bundle Endpoints

Search bundles

GET /v1/bundles/search?q=<query>

Parameter	Type	Description
`q`	string	Search query (matches name, description, keywords)
`limit`	number	Results per page (default: 20)
`offset`	number	Pagination offset

Example:

curl "https://registry.mpak.dev/v1/bundles/search?q=postgres"

{
  "results": [
    {
      "name": "@nimblebraininc/postgres-mcp",
      "version": "1.0.0",
      "description": "Query PostgreSQL databases",
      "downloads": 1250,
      "certification": "L2"
    }
  ],
  "total": 1
}

Get bundle metadata

GET /v1/bundles/<scope>/<name>

Returns full package metadata including all versions, platforms, provenance, and certification status.

Get specific version

GET /v1/bundles/<scope>/<name>/<version>

Returns metadata for a specific version, including the download URL for the .mcpb file.

Announce a bundle

POST /v1/bundles/announce

Used by the mcpb-pack GitHub Action to register a new bundle version. Requires a GitHub OIDC token in the Authorization header. Not intended for direct use. See Publishing.

Skill Endpoints

Skills follow the same pattern as bundles:

Endpoint	Description
`GET /v1/skills/search?q=<query>`	Search skills
`GET /v1/skills/<scope>/<name>`	Get skill metadata
`POST /v1/skills/announce`	Announce a skill (via GitHub Action)

Badge Endpoints

Generate SVG badges for your README:

GET /v1/bundles/<scope>/<name>/badge.svg

Parameter	Values	Shows
`type`	`version` (default)	Latest version
`type`	`certification`	Security level (L1-L4)
`type`	`downloads`	Total downloads
`type`	`runtime`	Server runtime (python/node)

Example:

[![mpak](https://registry.mpak.dev/v1/bundles/@yourorg/server/badge.svg)](https://mpak.dev/packages/@yourorg/server)

Rate Limits

Next Steps

How the Registry Works Architecture and data flow

Browsing the Registry Using the web UI at mpak.dev

CLI search Search from the command line