BALLDONTLIE 스포츠 API를 위한 먼 모형 Context 의정서 서버. 도구 카탈로그는 공급 업체 공개 OpenAPI 사양에서 생성되므로 엔드포인트 방법, 경로, 매개 변수 및 제약은 API 소스로 정렬됩니다.

현재 생성 된 표면은 27 사양의 529 도구가 포함되어 있습니다. 계정, ATP, Bundesliga, 대학 야구, 카운터 스트라이크, 도타 2, EPL, F1, FIFA 월드컵, La Liga, Ligue 1, League of Legends, MLB, MLS, MMA, NBA, NCAAB, NCAAF, NCAAW, NFL, NHL, PGA, Serie A, UCL, Valorant, WNBA, WTA 및 WTA [0]. [0] [0] [0] [0]] [0] [0]] [0] [0] [0]] [0]] [0]]]] [0] [0] [0]]]]] [0] [0] [0] [0]]] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0] [0]] [0] [0] [0] [0] [0] [0] [0] [0]]]]] [0] [0]]]

인증

모든 MCP 요청은 BALLDONTLIE API 키가 필요합니다.

초기화, 도구 목록, 인증된 문서 및 MCP 밖에 공개되는 API 작업은 진행하기 전에 공급 된 키를 검증합니다. 다른 도구는 해당 인증된 BALLDONTLIE 엔드포인트에 권한 부여 헤더만 호출합니다.

공개 서비스 메타데이터는 /health과 /.well-known/mcp-config]로 제한됩니다. /api/docs]는 유효한 API 키가 필요합니다.

민감한 계정 도구

완전한 계정 API 표면은 등록되지만 다음 도구는 기본적으로 비활성화됩니다

BALLDONTLIE MCP Server

Remote Model Context Protocol server for the BALLDONTLIE sports API. The tool catalog is generated from the vendored public OpenAPI specifications so endpoint methods, paths, parameters, and constraints stay aligned with the API source.

The current generated surface contains 529 tools from 27 specifications: Account, ATP, Bundesliga, college baseball, Counter-Strike, Dota 2, EPL, F1, FIFA World Cup, La Liga, Ligue 1, League of Legends, MLB, MLS, MMA, NBA, NCAAB, NCAAF, NCAAW, NFL, NHL, PGA, Serie A, UCL, Valorant, WNBA, and WTA. /health reports the authoritative runtime count and deployed revision.

Authentication

Every MCP request requires a BALLDONTLIE API key:

Authorization: Bearer YOUR_API_KEY

Initialization, tool listing, authenticated documentation, and API operations that are public outside the MCP validate the supplied key before proceeding. Other tool calls forward only the Authorization header to the corresponding authenticated BALLDONTLIE endpoint.

Public service metadata is limited to /health and /.well-known/mcp-config. /api/docs requires a valid API key.

Sensitive Account tools

The complete Account API surface is registered, but the following tools are disabled by default:

• account_signup
• account_rotate_api_key
• account_change_subscription
• account_cancel_subscription
• account_create_checkout
• account_get_billing_portal

They can create credentials, change billing state, or return sensitive hosted billing-session URLs. A deployment must set ENABLE_SENSITIVE_ACCOUNT_TOOLS=true exactly to enable them. Enabling the flag means those values may intentionally enter the authenticated caller’s MCP transcript. Other spellings, casing, or whitespace fail closed.

account_get_me remains available but always omits the api_key response field.

MCP request example

curl https://mcp.balldontlie.io/mcp \
  -H 'Content-Type: application/json' \
  -H 'Authorization: Bearer YOUR_API_KEY' \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/call",
    "params": {
      "name": "nba_get_teams",
      "arguments": {}
    }
  }'

Use tools/list to retrieve the current catalog, input schemas, and MCP read-only/destructive annotations.

Development

npm ci
npm run check:openapi
npm test
npm run build

The tests independently compare every generated operation and input against all vendored specifications. They also cover legacy tool-name compatibility, exact array query serialization, path/body dispatch, credential-safe errors and logs, API-key validation limits, and Account safety controls. Tests never call a live Account mutation.

Updating from the API source

1. Copy balldontlie-2/marketing/public/openapi.yml to openapi.yml.
2. Copy every balldontlie-2/marketing/public/openapi/*.yml file into openapi/.
3. Update scripts/openapi-source.json to the source API commit.
4. Run npm run generate:openapi.