Log inSubmit server
API logo

API

HTTP requests, endpoint health checks, JWT decoding, URL parsing, and HTTP header security analysis over MCP.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install API

Pick your client, then add it in one click or paste the config.

No confirmed install command yet

We only publish a config when the install details come from the project itself — its README, its docs, or a verified owner. We haven’t found those for api, and we’d rather show nothing than a guess you’d paste into your client.

Open setup steps on GitHub

Overview

The api MCP server gives AI agents tools for making HTTP requests, checking endpoint health, decoding JWTs, parsing URLs, and reviewing HTTP headers. It runs locally through a built Node.js entry point and communicates with MCP clients over standard input/output. Reach for it when an agent needs to inspect APIs, test requests, validate service availability, or review web security headers. JWT decoding does not perform cryptographic verification.

Use cases

  • Test REST endpoints with custom methods and headers
  • Check the health and SSL status of multiple APIs
  • Inspect JWT claims and expiration state
  • Parse or construct URLs for API workflows
  • Review HTTP security headers and cookie attributes

Key features

  • Flexible HTTP requests with response timing
  • Parallel endpoint health checks
  • JWT decoding without signature verification
  • URL parsing and construction
  • Security header analysis with letter grading
  • CORS, caching, and cookie inspection

Tools5

What API lets your agent do. Expand a tool for its parameters.

Self-reported~275 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked Today

Recent health check succeeded.

7/7 checks healthy over the last 56d

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

Last commit7mo agoMost recent push to the default branch.
Tools exposed5Callable tools this server registers over MCP.

How API works

What api MCP server does

The api MCP server groups several HTTP and API inspection tasks behind MCP tools. It can send GET, POST, PUT, DELETE, PATCH, HEAD, and OPTIONS requests with caller-controlled headers, request bodies, authentication, and timeouts. Results include the HTTP status, response headers, response body, and timing data.

It also supports operational checks and inspection tasks. Multiple endpoints can be checked in parallel for status, response time, SSL certificate validity, certificate expiry, and optional response-body validation. URL parsing separates protocol, host, port, path, query parameters, and hash values, while URL construction accepts those parts as inputs.

How it works

The api MCP server is built as a Node.js package and exposes its functionality through the Model Context Protocol. After the project is installed and built, an MCP client starts the generated dist/index.js file with Node. An agent can then invoke individual tools using structured inputs and receive structured results.

JWT inspection is deliberately limited to decoding. The jwt_decode tool returns the token header and payload, issued-at and expiry information, and the current expired state, but it does not verify the token's cryptographic signature. This makes it suitable for inspection and troubleshooting, not authentication decisions.

The header_analyzer tool can fetch headers from a live URL or assess a supplied headers object. Its review covers security headers such as HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy, along with caching directives, CORS configuration, and cookie attributes. It produces a letter-grade security result.

Setup and configuration

Install dependencies and compile the project from its repository:

Terminal
npm install
npm run build

For Claude Desktop, configure an MCP server whose command is node and whose argument points to the built dist/index.js file. The example uses a local filesystem path, so replace it with the path on your machine.

Tools and capabilities

  • http_request: Sends supported HTTP methods with headers, body, authentication, and timeout controls.
  • api_health: Checks several endpoints concurrently and summarizes healthy, unhealthy, and errored results.
  • jwt_decode: Decodes JWT headers and payloads without signature verification.
  • url_parse: Breaks URLs into components or builds URLs from components.
  • header_analyzer: Reviews supplied or fetched headers for security, caching, CORS, and cookie properties.

The api MCP server fits agents that need direct HTTP testing, basic service monitoring, token inspection, URL manipulation, or an initial review of web response headers.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about API

api is an MCP server that connects AI agents to HTTP and API testing workflows. Its main tools make HTTP requests, check multiple endpoint health, decode JWTs without verification, parse or build URLs, and analyze response headers for security, caching, CORS, and cookie settings.

Install it with `npm install`, then build it with `npm run build`. Start the generated `dist/index.js` file with Node from your MCP client configuration. The README provides command examples for Claude Desktop and Claude Code.

No, api only decodes JWTs and does not perform cryptographic verification. The `jwt_decode` tool returns the token header, payload, issued-at time, expiry time, and whether the token is currently expired.

Yes, the `api_health` tool checks multiple endpoints in parallel. It reports HTTP status, response time, SSL certificate validity and expiry, optional response-body validation, and totals for healthy, unhealthy, and errored endpoints.

Use `header_analyzer` with a live URL or a supplied headers object. It examines security headers, caching directives, CORS configuration, and cookie attributes, then provides a letter grade for the reviewed security posture.

Related MCP servers

All in Developer Tools All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewAPI AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/api-9?style=directory)](https://allmcps.com/mcp/api-9)
HTML Embed
<a href="https://allmcps.com/mcp/api-9"><img src="https://allmcps.com/api/badge/api-9?style=directory" alt="API on AllMCPs" /></a>