All 94 LearnWorlds LMS API endpoints as safety-categorized MCP tools (read/write/destructive).
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent โ or use 1-click editor setup below.
We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag โ we're steadily working through the catalog.
๐ก Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
Run your LearnWorlds school in plain language from AI assistants like Claude, Cursor, and any other MCP client.
This Model Context Protocol server exposes the LearnWorlds public API โ all 94 endpoints, generated straight from the OpenAPI spec into MCP tools. Every tool is safety-categorized (๐ข read-only / ๐ก write / ๐ด destructive) so your assistant knows what an action does before it calls it. It runs over stdio (Claude Desktop and other local launchers) or Streamable HTTP (hosted in Docker), and ships with retries, client-side rate limiting, and request timeouts so it holds up against a live school.
Some MCP servers just forward an API. This one is built to be safe to hand to an LLM and easy to run for real:
| What you get | Why it matters |
|---|---|
| All 94 endpoints, spec-driven | Full coverage of courses, users, enrollments, payments, subscriptions, coupons, certificates, seats, community and reporting โ nothing hand-picked or left behind. |
| Every tool is safety-categorized ๐ข / ๐ก / ๐ด | A banner at the top of each tool description tells the model exactly what it does โ read, create, update or delete โ before it acts. |
| Descriptions written for agents, not humans | Every tool spells out its side effects, auth and rate-limit behavior, return shape, error codes, when not to reach for it, and which sibling tools are the alternatives. |
Machine-readable MCP annotations (readOnlyHint, destructiveHint) | Hosts that honor annotations (Claude included) can auto-trust reads and demand confirmation before anything destructive. |
| Automatic retries with backoff | Transient 429 / 5xx responses are retried with jittered exponential backoff, honoring the server's Retry-After header. |
| Built-in rate limiting | Self-throttles under LearnWorlds' 30 requests / 10 s cap so a burst of tool calls never trips a 429. |
| Per-request timeouts | A hung upstream call is aborted and retried instead of freezing the server. |
| Two transports: stdio and Streamable HTTP | Use it locally in Claude Desktop, or run one always-on server that any number of MCP clients reach over HTTP. |
| Docker + docker-compose, health check, auto-restart | Production-style deployment out of the box: docker compose up and it stays up. |
| Optional bearer-token auth on the HTTP endpoint | Put the server behind a shared secret the moment it's reachable beyond localhost. |
| Your secrets never reach the model | Credentials live in the server's environment and are injected on every request โ the assistant only ever sees tool inputs and API responses. |
| Drop-in spec updates | LearnWorlds ships a newer YAML? Replace one file and rebuild โ new endpoints become new tools automatically, no code changes. |
At the time of writing this appears to be the only dedicated LearnWorlds MCP server. You could instead point a generic OpenAPIโMCP wrapper at the spec โ here's what that leaves on the table:
| Capability | This project | Generic OpenAPIโMCP wrapper* |
|---|---|---|
| All 94 LearnWorlds endpoints as tools | โ | โ |
| Per-tool ๐ข / ๐ก / ๐ด safety category + banner | โ | โ |
readOnlyHint / destructiveHint MCP annotations | โ | โ |
$ref dereferencing + recursion-safe schemas | โ | โ |
Automatic retries on 429 / 5xx (honors Retry-After) | โ | โ |
| Client-side rate limiting (stays under 30 req / 10 s) | โ | โ |
| Per-request timeout with abort | โ | โ |
stdio transport | โ | โ |
| Streamable-HTTP transport | โ | โ |
| Docker + docker-compose, health check, auto-restart | โ | โ |
| Optional bearer-token auth on the endpoint | โ | โ |
| Credentials injected server-side, never sent to the model | โ | โ |
| License | MIT | varies |
*Generic OpenAPIโMCP wrappers turn any Swagger/OpenAPI spec into MCP tools. They can reach the same endpoints, but treat every operation identically โ no safety categories, no resilience, no deployment story, and no guardrails tuned for live school data. "โ" = varies by tool / not guaranteed. Snapshot from July 2026.
Once it's connected, ask your assistant things like:
Tools are generated automatically from the API and grouped into ๐ข read-only, ๐ก write, and ๐ด destructive โ so a well-behaved host can treat each group differently.
The server parses the bundled OpenAPI spec into MCP tools (resolving $refs and
guarding against recursive schemas), tags each with its safety category, and injects
your bearer token and Lw-Client header on every outgoing request. Your credentials
stay in the server's environment โ the model never sees or handles them.
1. Add your credentials. Copy the example config and fill it in:
2. Start the server:
The bundled docker-compose.yml binds to 127.0.0.1:8765 only, so the server is
reachable from your machine but not the network.
3. Confirm it's running:
4. Connect your MCP client. The MCP endpoint is http://localhost:8765/mcp.
Claude Desktop โ add a custom connector (Settings โ Connectors) pointing at
the URL, or bridge it locally with mcp-remote.
Add this under mcpServers in your config, then fully quit and reopen the app:
(Drop the --header line if you left MCP_SHARED_TOKEN empty.)
Claude Code โ one command:
Claude Cowork โ shares Claude Code's MCP config, so the command above makes the tools available there too.
Every push to main publishes a ready-to-run image to the GitHub Container Registry,
so you can skip the local build entirely:
The server publishes itself to the official MCP Registry
as io.github.ohneben/learnworlds-mcp, so MCP clients that browse the registry can
install it without cloning anything:
server.json holds the registry metadata and
glama.json the Glama
directory entry.
Releasing is driven by the version in server.json: when a build sees a version the
registry does not yet list, it tags the image with that version and publishes it, using
GitHub OIDC so there is no token to store. Anything else โ an ordinary push, a re-run,
a second event for the same ref โ leaves the released image tag and the registry entry
untouched. Bumping the version is therefore the whole release: pushing a matching v*
tag or running the workflow by hand still works and takes the same path, and a tag that
disagrees with server.json fails the build rather than publishing the wrong thing.
The io.modelcontextprotocol.server.name label in the Dockerfile is
what proves the image belongs to that name, so keep it in step with name in
server.json. It is applied at build time โ there is nothing to verify by hand.
Factual signals from GitHub, npm, and our automated checks โ not a rating.
No reviews yet โ be the first to share how this listing worked for you.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/learnworlds)<a href="https://allmcps.com/mcp/learnworlds"><img src="https://allmcps.com/api/badge/learnworlds?style=directory" alt="LearnWorlds on AllMCPs" /></a>