Api
Gives Claude five focused HTTP utilities: making requests with full header and auth control, parallel health checks across multiple endpoints with SSL validation, JWT decoding without verification, URL parsing and building, and security header analysis with letter grading. The header analyzer is especially handy when you're auditing HSTS, CSP, CORS configs, and cookie attributes. Reach for this when you need Claude to test APIs, debug authentication tokens, or assess endpoint security posture. All tools return structured data with timing info, making it straightforward to chain operations or build monitoring workflows. Works over stdio, so it runs locally without external dependencies beyond Node.
- tools
- 5
- transport
- STDIO
- last updated
- Mar 22, 2026
Tools
5 toolsPublic tool metadata for what this MCP can expose to an agent.
http_requestMake any HTTP request (GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS) with full control over headers, body, authentication, and timeouts. Returns status code, response headers, body, and timing information.
Make any HTTP request (GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS) with full control over headers, body, authentication, and timeouts. Returns status code, response headers, body, and timing information.
No parameter schema in public metadata yet.
api_healthCheck the health of multiple API endpoints in parallel. Returns HTTP status, response time, SSL certificate validity and expiry, and optional response body validation. Includes a summary with counts of healthy, unhealthy, and errored endpoints.
Check the health of multiple API endpoints in parallel. Returns HTTP status, response time, SSL certificate validity and expiry, and optional response body validation. Includes a summary with counts of healthy, unhealthy, and errored endpoints.
No parameter schema in public metadata yet.
jwt_decodeDecode a JWT token without cryptographic verification. Returns the decoded header and payload, issued-at time, expiry time, and whether the token is currently expired.
Decode a JWT token without cryptographic verification. Returns the decoded header and payload, issued-at time, expiry time, and whether the token is currently expired.
No parameter schema in public metadata yet.
url_parseParse a URL into its component parts (protocol, host, port, path, query parameters, hash) or build a URL from individual parts.
Parse a URL into its component parts (protocol, host, port, path, query parameters, hash) or build a URL from individual parts.
No parameter schema in public metadata yet.
header_analyzerAnalyze HTTP response headers for security posture (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), caching directives, CORS configuration, and cookie attributes. Provides a letter grade for security. Can fetch headers from a live URL...
Analyze HTTP response headers for security posture (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), caching directives, CORS configuration, and cookie attributes. Provides a letter grade for security. Can fetch headers from a live URL...
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
@rog0x/mcp-api-tools
HTTP/API testing tools for AI agents, built on the Model Context Protocol.
Tools
http_request
Make any HTTP request (GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS) with full control over headers, body, authentication, and timeouts. Returns status code, response headers, body, and timing information.
api_health
Check the health of multiple API endpoints in parallel. Returns HTTP status, response time, SSL certificate validity and expiry, and optional response body validation. Includes a summary with counts of healthy, unhealthy, and errored endpoints.
jwt_decode
Decode a JWT token without cryptographic verification. Returns the decoded header and payload, issued-at time, expiry time, and whether the token is currently expired.
url_parse
Parse a URL into its component parts (protocol, host, port, path, query parameters, hash) or build a URL from individual parts.
Details
- Repository
- github.com/rog0x/mcp-api-tools
- Package
@rog0x/mcp-api-tools- Transport
- STDIO
- Registry
- MCP registry, active