MCP LifeCycle
Manage the full life cycle of your MCP servers, from the AI era, through APIQuality.
What is the MCP Life Cycle?
The MCP (Model Context Protocol) Life Cycle is APIQuality’s end-to-end process for turning your existing APIs into governed, secure and production-ready MCP servers. Instead of generating an MCP by hand, you define a dedicated life cycle that lints the code, validates the JSON schema, generates the MCP from your OpenAPI, and runs functional and security testing — all from a single platform.
It brings the same discipline of API Scoring 360 (definition, quality and security) to the world of MCP, so the tools your AI agents consume are reliable, consistent and safe by design.
How do we use the MCP Life Cycle in APIQuality?
Create the MCP
Lets you create the MCP from:
- JSON Schema
- OpenAPI
- Upload existing code
Define the MCP life cycle
To use it, you need to create a life cycle in the Environments section. Some available stages:
- LIntMCP (code linting)
- Check JSON Schema (JSON schema validation)
- OpenAPI MCP Generator (code generation from the OpenAPI)
- MCP Interviewer (functional testing)
- MCP Scan (security testing).
- Apigee deployer: Deploys the MCP to Apigee
- WSO2 deployer: Deploys the MCP to WSO2
Calculate your scoring
Track the scoring at MCP level by analyzing the quality and security of the MCP.
Generate your MCP report
Generate your MCP report by analyzing the tokens consumed, the tools, the functional tests and the security tests.
Control dashboard
From a single dashboard you can review all your MCPs, break them down by functional domains and list the worst-performing MCPs so your organization can focus where it matters.
Companies that trust us






Some FAQs about the MCP Life Cycle
What is an MCP life cycle in APIQuality?
It is a dedicated pipeline that turns an API into a governed MCP server through five stages: linting (LIntMCP), JSON schema validation (Check JSON Schema), generation from OpenAPI (OpenAPI MCP Generator), functional testing (MCP Interviewer) and security scanning (MCP Scan).
What do I need before creating an MCP?
You must have a life cycle created in the Environments section and an organization-level token named EXTERNAL_CI_JOB_TOKEN with read permissions across the whole group.
How do I create an MCP from my API?
Once the life cycle is selected, open the MCPs tab and use the “Create MCP” option. The first run executes the OpenAPI MCP Generator and produces the MCP code.
What is the tools.json file?
It is the file generated alongside the MCP code that describes the tools the MCP will expose. You can review it to see exactly what will be generated.
Can I change the endpoint of the generated MCP?
Yes. By default the generator uses the URL defined inside the OpenAPI. To change it, edit both the tools.json file and the generated code directly.
How does this relate to API Scoring 360?
The MCP Life Cycle applies the same definition, quality and security principles measured by API Scoring 360, ensuring MCP servers are reliable, well-documented and secure before they reach your AI agents.
Learn more about APIQuality resources
APIQuality offers you a series of resources so you can learn in depth how it integrates this and other technologies.
APIQuality's Blog
Integration Chaos in the AI Era: How MCP Governance Stops Hallucinations and Security Breaches Before They Reach Your Core
Every CTO integrating an LLM into production faces the same...
Read moreIntegration chaos in the AI era: how MCP governance prevents hallucinations and security breaches in the corporate core
For technology leaders (CTOs, CIOs, and Enterprise Architects), the breakneck...
Read more