API MCP server
HTTP client, JWT decode, header analysis for AI agents
0 stars
Reviews
Write oneNobody has reviewed API yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
API tools (5)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
api_healthCheck the health of multiple API endpoints. Returns status, response time, SSL certificate validity, and optional response body validation for each endpoint.
header_analyzerAnalyze HTTP response headers for security (HSTS, CSP, X-Frame-Options, etc.), caching directives, CORS configuration, cookies, and server information. Provides a security grade.
http_requestMake an HTTP request with full control over method, headers, body, authentication, and timeouts. Returns status, headers, body, and timing information.
jwt_decodeDecode a JWT token without verification. Returns header, payload, expiry, issued-at time, and whether the token is expired.
url_parseParse a URL into its component parts: protocol, host, port, path, query parameters, hash, and more. Can also build a URL from parts.
Public scan report
scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan21 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 190 days ago4/15
- Maintainer identityregistry namespace matches repository owner6/10
Install API in Claude Code, Cursor or VS Code
Runs npx -y @rog0x/mcp-api-tools on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add api -- npx -y @rog0x/mcp-api-tools
API: common questions
- Is API MCP server safe?
- Mostly: it is graded B (72/100). Read the API safety report
- How do I install API?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does API need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is API maintained?
- The last commit was 206 days ago (2026-03-21). The latest release is v1.0.2.