About rog0x
rog0x is an MCP server for AI agents and developers testing HTTP APIs. It combines request execution with endpoint health checks, JWT decoding, URL parsing, and response-header security analysis.
Key features
- 01HTTP requests with configurable methods and auth
- 02Parallel API health checks
- 03JWT decoding without verification
- 04URL parsing and construction
- 05Security and cache header analysis
Use cases
- 01Inspect API responses during testing
- 02Check several endpoints and SSL validity
- 03Review JWT claims and expiration
- 04Assess security headers on a live URL
MCP support
Exposes HTTP and API analysis tools to MCP clients, including request execution, health checks, JWT decoding, URL parsing, and header analysis.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
5Saved tool list · updated 3w ago
| Parameter | Type | Required | Description |
|---|---|---|---|
| url | string | Yes | The full URL to send the request to |
| auth | object | No | Authentication configuration |
| auth.type | enum | Yes | Auth type: basic or bearerbasic | bearer |
| auth.token | string | No | Token for bearer auth |
| auth.password | string | No | Password for basic auth |
| auth.username | string | No | Username for basic auth |
| body | string | No | Request body (for POST, PUT, PATCH) |
| method | string | Yes | HTTP method: GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS |
| headers | object | No | Key-value pairs of HTTP headers to include |
| timeout | number | No | Request timeout in milliseconds (default: 30000) |
| follow_redirects | boolean | No | Whether to follow redirects (default: true) |
Details
From the project README@rog0x/mcp-api-tools
HTTP/API testing tools for AI agents, built on the Model Context Protocol.
Tools
http_request
Make any HTTP request (GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS) with full control over headers, body, authentication, and timeouts. Returns status code, response headers, body, and timing information.
api_health
Check the health of multiple API endpoints in parallel. Returns HTTP status, response time, SSL certificate validity and expiry, and optional response body validation. Includes a summary with counts of healthy, unhealthy, and errored endpoints.
jwt_decode
Decode a JWT token without cryptographic verification. Returns the decoded header and payload, issued-at time, expiry time, and whether the token is currently expired.
url_parse
Parse a URL into its component parts (protocol, host, port, path, query parameters, hash) or build a URL from individual parts.
header_analyzer
Analyze HTTP response headers for security posture (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), caching directives, CORS configuration, and cookie attributes. Provides a letter grade for security. Can fetch headers from a live URL or analyze a provided headers object.
Installation
npm install
npm run build
Configuration
Claude Desktop
Add to your claude_desktop_config.json:
{
"mcpServers": {
"api-tools": {
"command": "node",
"args": ["D:/products/mcp-servers/mcp-api-tools/dist/index.js"]
}
}
}
Claude Code
claude mcp add api-tools node D:/products/mcp-servers/mcp-api-tools/dist/index.js
Examples
Make a POST request:
Use http_request to POST to https://httpbin.org/post with JSON body {"key": "value"}
Check API health:
Use api_health to check these endpoints: https://api.github.com, https://httpbin.org/get
Decode a JWT:
Use jwt_decode to decode this token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
Parse a URL:
Use url_parse to break down https://example.com:8080/api/v1?key=value&debug=true#section
Analyze security headers:
Use header_analyzer to check security headers for https://github.com
License
MIT
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.