@rog0x/mcp-api-tools

HTTP/API testing tools for AI agents, built on the Model Context Protocol.

Tools

`http_request`

Make any HTTP request (GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS) with full control over headers, body, authentication, and timeouts. Returns status code, response headers, body, and timing information.

`api_health`

Check the health of multiple API endpoints in parallel. Returns HTTP status, response time, SSL certificate validity and expiry, and optional response body validation. Includes a summary with counts of healthy, unhealthy, and errored endpoints.

`jwt_decode`

Decode a JWT token without cryptographic verification. Returns the decoded header and payload, issued-at time, expiry time, and whether the token is currently expired.

`url_parse`

Parse a URL into its component parts (protocol, host, port, path, query parameters, hash) or build a URL from individual parts.

`header_analyzer`

Analyze HTTP response headers for security posture (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), caching directives, CORS configuration, and cookie attributes. Provides a letter grade for security. Can fetch headers from a live URL or analyze a provided headers object.

Installation

Terminal

npm install
npm run build

Configuration

Claude Desktop

Add to your claude_desktop_config.json:

config.json

{
  "mcpServers": {
    "api-tools": {
      "command": "node",
      "args": ["D:/products/mcp-servers/mcp-api-tools/dist/index.js"]
    }
  }
}

Claude Code

Terminal

claude mcp add api-tools node D:/products/mcp-servers/mcp-api-tools/dist/index.js

Examples

Make a POST request:

Code

Use http_request to POST to https://httpbin.org/post with JSON body {"key": "value"}

Check API health:

Code

Use api_health to check these endpoints: https://api.github.com, https://httpbin.org/get

Decode a JWT:

Code

Use jwt_decode to decode this token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

Parse a URL:

Code

Use url_parse to break down https://example.com:8080/api/v1?key=value&debug=true#section

Analyze security headers:

Code

Use header_analyzer to check security headers for https://github.com

License

MIT