io.github.rog0x/api
HTTP client, JWT decode, header analysis for AI agents
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
@rog0x/mcp-api-toolsclaude mcp add api -- npx -y @rog0x/mcp-api-tools@1.0.2
{
"mcpServers": {
"api": {
"command": "npx",
"args": [
"-y",
"@rog0x/mcp-api-tools@1.0.2"
]
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
@rog0x/mcp-api-tools
HTTP/API testing tools for AI agents, built on the Model Context Protocol.
Tools
http_request
Make any HTTP request (GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS) with full control over headers, body, authentication, and timeouts. Returns status code, response headers, body, and timing information.
api_health
Check the health of multiple API endpoints in parallel. Returns HTTP status, response time, SSL certificate validity and expiry, and optional response body validation. Includes a summary with counts of healthy, unhealthy, and errored endpoints.
jwt_decode
Decode a JWT token without cryptographic verification. Returns the decoded header and payload, issued-at time, expiry time, and whether the token is currently expired.
url_parse
Parse a URL into its component parts (protocol, host, port, path, query parameters, hash) or build a URL from individual parts.
header_analyzer
Analyze HTTP response headers for security posture (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), caching directives, CORS configuration, and cookie attributes. Provides a letter grade for security. Can fetch headers from a live URL or analyze a provided headers object.
Installation
npm install
npm run build
Configuration
Claude Desktop
Add to your claude_desktop_config.json:
{
"mcpServers": {
"api-tools": {
"command": "node",
"args": ["D:/products/mcp-servers/mcp-api-tools/dist/index.js"]
}
}
}
Claude Code
claude mcp add api-tools node D:/products/mcp-servers/mcp-api-tools/dist/index.js
Examples
Make a POST request:
Use http_request to POST to https://httpbin.org/post with JSON body {"key": "value"}
Check API health:
Use api_health to check these endpoints: https://api.github.com, https://httpbin.org/get
Decode a JWT:
Use jwt_decode to decode this token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
Parse a URL:
Use url_parse to break down https://example.com:8080/api/v1?key=value&debug=true#section
Analyze security headers:
Use header_analyzer to check security headers for https://github.com
License
MIT
Frequently asked questions
What is io.github.rog0x/api?
HTTP client, JWT decode, header analysis for AI agents
How do I install io.github.rog0x/api?
It runs on your machine. In Claude Code: claude mcp add api -- npx -y @rog0x/mcp-api-tools@1.0.2. For other clients, paste the JSON configuration from this page into their MCP settings.
Does io.github.rog0x/api need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is io.github.rog0x/api open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains io.github.rog0x/api?
It is published by rog0x. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.