Build with OpenNavo

Connect your tools to OpenNavo's public, read-only Mac app catalog through MCP or HTTP.

Use the anonymous public MCP server or the read-only HTTP API to search the catalog, inspect apps, browse releases and dependencies, and read public collections and articles.

Public MCP

A streamable HTTP MCP server with nine read-only catalog tools. It needs no account or token.

MCP endpoint https://opennavo.com/mcp

Connect an MCP client

Claude Desktop

{
  "mcpServers": {
    "opennavo": {
      "url": "https://opennavo.com/mcp"
    }
  }
}

Claude Code

claude mcp add --transport http opennavo https://opennavo.com/mcp

Cursor

{
  "mcpServers": {
    "opennavo": {
      "url": "https://opennavo.com/mcp"
    }
  }
}

Codex

[mcp_servers.opennavo]
url = "https://opennavo.com/mcp"

Public HTTP API

The public API exposes stable, anonymous GET endpoints under the /api/v1 base path. The OpenAPI document is the source of truth for parameters and response schemas.

OpenAPI specification API catalog

Search with curl

curl --get 'https://api.opennavo.com/api/v1/search' \
  --data-urlencode 'q=Visual Studio Code' \
  --data-urlencode 'size=5'

Rate limits

Limits are enforced per client IP with a Redis-backed GCRA limiter. The response headers tell you how much capacity remains.

Ordinary read endpoints: 300 requests per 60 seconds per IP.
Search: 60 requests per 60 seconds per IP.
Public MCP: the rate limit is 60 requests per 60 seconds per IP.
HTTP 429 responses include Retry-After in seconds. Successful API responses include X-RateLimit-Limit and X-RateLimit-Remaining.

Terms of use

These interfaces are provided for useful, responsible access to public OpenNavo catalog data.

Fair use: keep requests reasonable and cache results when practical.
Attribution: link back to the relevant page on opennavo.com when you publish catalog data or derived work.
No SLA: the interfaces may change, be limited, or be unavailable without a service-level commitment.
Scraping: do not scrape beyond the published limits or try to evade per-IP controls.
Read only: the public API and MCP do not provide account, write, or administrative operations.