MCP HTTP Requests
MCP HTTP 요청
API 테스트, 웹 자동화 및 보안 테스트를 위한 포괄적인 HTTP 클라이언트 MCP(Model Context Protocol) 서버입니다. 상세한 로깅 기능을 갖춘 모든 기능을 갖춘 HTTP 도구를 제공합니다.
기능
완벽한 HTTP 메서드 지원: GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS
고급 보안 테스트: 모의 해킹, SQL 인젝션, XSS 테스트를 위한 원시(Raw) 요청 도구
전체 매개변수 지원: 모든 메서드에 대해 Headers, Cookies, Body, 타임아웃 설정 지원
자동 로깅: 모든 요청과 응답은
~/mcp_requests_logs/에 자동으로 기록됨정밀도 보장: 원시(Raw) 모드는 모든 문자를 정확하게 보존
MCP 호환: Claude Code, Cursor 및 기타 MCP 클라이언트와 호환
Related MCP server: http-client-mcp
설치
pip install mcp-request사용 방법
Cursor/Claude Code에서 사용
MCP 구성 파일(~/.cursor/mcp_servers.json 또는 유사 파일)에 추가하세요:
{
"mcpServers": {
"mcp-request": {
"command": "mcp-request",
"type": "stdio"
}
}
}사용 가능한 도구
http_get - 모든 기능을 지원하는 GET 요청
http_post - 모든 기능을 지원하는 POST 요청
http_put - 모든 기능을 지원하는 PUT 요청
http_delete - 모든 기능을 지원하는 DELETE 요청
http_patch - 모든 기능을 지원하는 PATCH 요청
http_head - 모든 기능을 지원하는 HEAD 요청
http_options - 모든 기능을 지원하는 OPTIONS 요청
http_raw_request - 🔒 보안 테스트를 위한 원시(Raw) HTTP 요청
사용 예시
# Basic GET request / 基础 GET 请求
http_get("https://api.example.com/users")
# POST with data and headers / 带数据和请求头的 POST 请求
http_post(
url="https://api.example.com/login",
body='{"username":"test","password":"test"}',
headers={"Content-Type": "application/json"}
)
# Security testing with raw request / 使用原始请求进行安全测试
http_raw_request(
url="https://vulnerable-site.com/search",
method="POST",
raw_body="q=test' OR 1=1--",
headers={"Content-Type": "application/x-www-form-urlencoded"}
)보안 테스트 기능
http_raw_request 도구는 보안 테스트를 위해 특별히 설계되었습니다:
절대적 정밀도: 모든 문자를 정확하게 보존
인코딩 없음: 특수 문자(', ", , %, &, =)를 그대로 전송
완벽한 헤더: 긴 쿠키나 토큰을 잘라내지 않음
원시 페이로드: SQL 인젝션, XSS, CSRF 테스트에 최적
로깅
모든 HTTP 요청과 응답은 다음 위치에 자동으로 기록됩니다:
위치:
~/mcp_requests_logs/형식: 타임스탬프와 전체 요청/응답 세부 정보가 포함된 JSON 형식
파일명:
requests_YYYYMMDD_HHMMSS.log
로그 확인 방법:
tail -f ~/mcp_requests_logs/requests_*.log시스템 요구 사항
Python ≥ 3.13
httpx ≥ 0.25.0
mcp[cli] ≥ 1.9.4
라이선스
MIT 라이선스
기여
기여를 환영합니다! 이 도구는 방어적 보안 테스트 및 합법적인 API 테스트 목적으로만 설계되었습니다.
Available Tools
8 toolshttp_deleteC
HTTP DELETE request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. It mentions that 'All requests logged,' which adds some context about side effects. However, it doesn't cover critical aspects like authentication requirements, rate limits, error handling, or what 'DELETE' actually does to the target resource (destructive nature).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core purpose. Every phrase ('HTTP DELETE request,' 'full support,' 'All requests logged') contributes meaningful information without waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter tool with no annotations and no output schema, the description is incomplete. It lacks details on authentication, error responses, the destructive nature of DELETE, and how to interpret results. The logging mention is helpful but insufficient for full contextual understanding.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It lists 'headers, cookies, body, timeout' as supported features, which maps to 4 of the 5 parameters (missing 'url'). This adds some meaning beyond the bare schema, but doesn't explain parameter purposes, formats, or constraints in detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP DELETE request' with 'full support' for various HTTP features, which is a specific verb+resource combination. However, it doesn't explicitly distinguish this DELETE operation from its sibling tools (GET, HEAD, OPTIONS, etc.) beyond the HTTP method name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this DELETE request versus alternatives like http_raw_request or other HTTP methods. It mentions 'full support' but doesn't specify use cases, prerequisites, or exclusions for DELETE operations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_getC
HTTP GET request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions logging ('All requests logged'), which adds some context, but fails to address critical traits like error handling, response format, authentication needs, or rate limits. For a network tool with zero annotation coverage, this is inadequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (one sentence) and front-loaded with the core purpose. However, the phrase 'with full support' is vague and could be trimmed for clarity, slightly reducing efficiency.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters with 0% schema coverage, no annotations, no output schema, and sibling tools, the description is incomplete. It lacks details on parameter usage, behavioral expectations (e.g., response handling), and differentiation from siblings, making it insufficient for effective tool selection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, meaning parameters are undocumented in the schema. The description lists parameters (headers, cookies, body, timeout) but provides no semantic details—e.g., what format headers/cookies should be in, what body content is allowed for GET, or timeout units. It doesn't compensate for the schema gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP GET request' with specific capabilities (headers, cookies, body, timeout), which is a specific verb+resource combination. However, it doesn't explicitly distinguish this from its sibling tools (http_delete, http_post, etc.) beyond the GET method, missing differentiation that would earn a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like http_post or http_raw_request. It mentions 'full support' but doesn't specify scenarios where GET is appropriate (e.g., retrieving data vs. sending data), leaving the agent without usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_headC
HTTP HEAD request with full support (headers, cookies, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It mentions logging and full support for features, but lacks details on error handling, response format, rate limits, authentication needs, or what 'full support' entails. This is inadequate for a network tool with potential side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with no wasted words. It front-loads the core action (HTTP HEAD request) and lists key features directly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, no output schema, and 0% schema coverage, the description is incomplete. It omits critical details like response behavior, error cases, and practical usage context, making it insufficient for safe and effective tool invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It lists parameters (headers, cookies, timeout) and implies a URL, but doesn't explain their purposes, formats, or constraints (e.g., timeout units, cookie structure). This adds minimal value beyond the schema's property names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP HEAD request' with specific features (headers, cookies, timeout) and mentions logging. It distinguishes from siblings by specifying the HTTP method (HEAD vs GET/POST/etc.), but doesn't explicitly differentiate the purpose beyond the method name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use HEAD vs other HTTP methods (like GET for retrieving body content) or alternatives. The description mentions features but not typical use cases (e.g., checking resource existence, headers without body).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_optionsC
HTTP OPTIONS request with full support (headers, cookies, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It discloses that 'All requests logged', which is a useful behavioral trait beyond the basic operation. However, it lacks details on error handling, response format, authentication needs, or rate limits, leaving gaps for a tool with no annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core action ('HTTP OPTIONS request') and lists key features. It avoids unnecessary words, though it could be slightly more structured (e.g., separating features with commas or bullets).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, no output schema, and 0% schema description coverage, the description is incomplete. It mentions logging but omits critical context like response handling, error scenarios, or typical outputs. For a 4-parameter tool with siblings, more detail is needed to guide effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It mentions 'headers, cookies, timeout' but doesn't explain their purposes, formats, or interactions. For example, it doesn't clarify what 'timeout' units are (seconds), how cookies are formatted, or provide examples. This adds minimal value beyond the schema's property names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP OPTIONS request' with specific features (headers, cookies, timeout), which is a specific verb+resource. It distinguishes from siblings by specifying the HTTP method (OPTIONS) versus DELETE, GET, HEAD, etc., though it doesn't explicitly contrast functionality beyond the method name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like http_get or http_raw_request. It mentions 'full support' but doesn't explain typical use cases for OPTIONS requests (e.g., CORS preflight, server capabilities) or when other HTTP methods might be more appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_patchC
HTTP PATCH request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden. It mentions logging behavior ('All requests logged') which is valuable, but fails to disclose critical behavioral traits like authentication requirements, error handling, rate limits, or what the response format looks like. For a network operation tool with zero annotation coverage, this leaves significant gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficiently structured in a single sentence that communicates the core functionality and key features. It's appropriately sized for the tool's complexity, though it could be slightly more front-loaded by starting with the primary purpose before listing capabilities.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a network operation tool with 5 parameters, no annotations, and no output schema, the description is insufficient. It doesn't explain what the tool returns, error conditions, authentication needs, or practical usage scenarios. The logging mention is helpful but doesn't compensate for the overall lack of context needed to use this tool effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description doesn't add any parameter-specific information beyond what's implied by the tool name. It mentions 'headers, cookies, body, timeout' in a list but doesn't explain their purpose, format, or constraints. The baseline is 3 since the schema provides complete parameter definitions despite lacking descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP PATCH request' with specific capabilities (headers, cookies, body, timeout) and mentions logging. It distinguishes itself from siblings by specifying the HTTP method (PATCH), but doesn't explicitly differentiate from other HTTP method tools beyond the method name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like http_post or http_put. It mentions 'full support' but doesn't explain when PATCH is appropriate compared to other HTTP methods, leaving the agent to infer usage from the method name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_postC
HTTP POST request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden but only mentions logging ('All requests logged'). It lacks critical behavioral details like authentication requirements, error handling, rate limits, or what 'logged' entails (e.g., where logs are stored). This is insufficient for a mutation tool with zero annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero waste. It front-loads the core purpose and includes key features without redundancy, making it highly concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with 5 parameters, 0% schema coverage, no annotations, and no output schema, the description is inadequate. It misses details on response format, error cases, security implications, and practical usage, leaving significant gaps in contextual understanding.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It lists parameters (headers, cookies, body, timeout) but doesn't explain their semantics, formats, or interactions beyond naming them. This adds minimal value over the schema, meeting the baseline for low coverage without fully compensating.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('HTTP POST request') and scope ('with full support (headers, cookies, body, timeout)'), distinguishing it from siblings by specifying POST method. However, it doesn't explicitly contrast with other HTTP methods like GET or PUT, which would make it a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like http_put or http_patch is provided. The description mentions 'full support' but doesn't specify scenarios where POST is appropriate over other HTTP methods, leaving usage context implied at best.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_putC
HTTP PUT request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. It adds that 'All requests logged', which is useful context about side effects. However, it lacks critical details: whether this is idempotent (typical for PUT), authentication requirements, error handling, rate limits, or what the response contains. For a mutation tool with zero annotation coverage, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero waste. It's front-loaded with the core purpose and includes key features without redundancy. Every word earns its place, making it highly concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (HTTP mutation tool with 5 parameters), no annotations, no output schema, and 0% schema coverage, the description is incomplete. It mentions logging but omits essential context: response format, error behavior, idempotency, authentication, and typical use cases. This leaves the agent under-informed for safe and effective tool invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It lists parameters (headers, cookies, body, timeout) in parentheses, adding some meaning beyond the schema's property names. However, it doesn't explain parameter purposes (e.g., timeout in seconds, body format) or constraints, leaving significant gaps. The baseline is lowered due to poor schema coverage, but the description provides minimal compensation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP PUT request' with 'full support (headers, cookies, body, timeout)', which specifies the verb (PUT request) and resources (HTTP endpoints). It distinguishes from siblings by mentioning PUT specifically, though it doesn't explicitly contrast with other HTTP methods like POST or PATCH.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like http_post or http_patch. It mentions 'full support' but doesn't explain typical PUT use cases (e.g., updating resources) or prerequisites, leaving the agent to infer usage from the HTTP method name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_raw_requestA
🔒 CRITICAL SECURITY TESTING TOOL: Sends HTTP requests with ABSOLUTE PRECISION - All requests logged
⚠️ IMPORTANT: This tool preserves EVERY SINGLE CHARACTER of your request:
Headers: Every cookie, token, session ID - NO CHARACTER LIMIT, NO TRUNCATION
Body: Raw payload sent byte-for-byte, preserving payloads exactly
Cookies: Complete cookie strings including long JWT tokens, session data
Special characters: ', ", , %, &, =, etc. are preserved without encoding
Whitespace: Spaces, tabs, newlines maintained exactly as provided
🎯 Perfect for: all kinds of security vulnerability testing, testing like SQL injection, XSS, CSRF, authentication bypass, parameter pollution 📝 Guarantee: What you input is EXACTLY what gets sent - zero modifications 📊 All requests and responses are automatically logged to ~/mcp_requests_logs/
| Name | Required | Description | Default |
|---|---|---|---|
| cookies | No | ||
| headers | No | ||
| method | No | GET | |
| raw_body | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden and excels. It discloses critical behavioral traits: preserves all characters exactly (no truncation/encoding), logs all requests/responses to a specific directory (~/mcp_requests_logs/), and guarantees zero modifications to input. This provides essential context about security implications and side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized but not optimally structured. It uses emojis and formatting that may not parse well in all contexts. While information-dense, it could be more front-loaded with the core purpose before details. Every sentence earns its place, but the presentation could be more streamlined for agent consumption.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (security-critical HTTP tool with 6 parameters, no annotations, no output schema), the description does well. It covers behavioral guarantees, logging, use cases, and precision characteristics. However, it doesn't mention error handling, response format expectations, or authentication requirements that might be relevant for a raw HTTP tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. While it doesn't explicitly name parameters, it provides crucial semantic context for several: explains how headers/cookies/body parameters are handled (preserved exactly), mentions special character handling relevant to all string parameters, and implies timeout behavior through the precision focus. However, it doesn't cover all 6 parameters explicitly.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool 'sends HTTP requests with ABSOLUTE PRECISION' and emphasizes it's for 'security testing'. It distinguishes from sibling tools (http_get, http_post, etc.) by highlighting its raw, unmodified request handling rather than being method-specific. The description goes beyond the name/title to explain the specific behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use this tool: 'Perfect for: all kinds of security vulnerability testing, testing like SQL injection, XSS, CSRF, authentication bypass, parameter pollution'. It also implicitly distinguishes from sibling tools by emphasizing raw precision rather than convenience methods. The description provides clear context about appropriate use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
8 tool updates
v1.0.0- First observed
http_delete - First observed
http_get - First observed
http_head - First observed
http_options - First observed
http_patch - First observed
http_post - First observed
http_put - First observed
http_raw_request
TDQS
Each tool has a clearly distinct purpose: seven tools correspond to specific HTTP methods (GET, POST, etc.), while the eighth tool (http_raw_request) is explicitly for security testing with absolute precision. There is no ambiguity or overlap between the standard HTTP method tools, and the security tool is clearly differentiated by its specialized function.
All tool names follow a consistent snake_case pattern with the prefix 'http_' followed by the HTTP method name (e.g., http_get, http_post) or a descriptive term (http_raw_request). This uniformity makes the tools easily predictable and readable, with no deviations in naming conventions.
With 8 tools, the set is well-scoped for an HTTP requests server. It covers all standard HTTP methods (GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS) plus a specialized security testing tool, which is a reasonable and complete set for the domain without being excessive or insufficient.
The tool surface is complete for the domain of HTTP requests. It provides full CRUD-like coverage with all standard HTTP methods, and the inclusion of http_raw_request adds specialized functionality for security testing, ensuring no gaps in core operations or advanced use cases.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Capture, inspect & debug HTTPS traffic across iOS, Android, browsers & backends — 304 MCP tools.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
MCP server for AI access to Swagger by SmartBear.
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceAn MCP server that provides HTTP client capabilities with browser impersonation for Chrome, Firefox, Safari, and Edge across multiple operating systems. It enables tools for making authenticated web requests, handling multipart file uploads, and retrieving responses in various formats.MIT
- AlicenseNot gradedqualityDmaintenanceAn MCP server that provides HTTP client capabilities with support for full HTTP methods, custom headers, query parameters, request bodies, and configurable timeouts.1MIT
- AlicenseNot gradedqualityBmaintenanceAn MCP server that enables AI agents to intercept, inspect, and modify HTTP traffic, with tools for searching, filtering, and managing captured requests and interceptors.148MIT
- AlicenseNot gradedqualityBmaintenanceHTTP Inspector MCP Server enables sending arbitrary HTTP requests, viewing history via a web panel, and taking screenshots of the panel for AI penetration testing workflows.1GPL 3.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/godzeo/mcp-request'
If you have feedback or need assistance with the MCP directory API, please join our Discord server