MCP HTTP Requests
MCP HTTP-запросы / MCP HTTP 请求工具
Комплексный MCP-сервер (Model Context Protocol) HTTP-клиента для тестирования API, веб-автоматизации и тестирования безопасности. Предоставляет полнофункциональные HTTP-инструменты с возможностями детального логирования.
为API 测试和 Web 自动化和安全测试设计提供的全功能 HTTP 客户端 MCP 服务器,具备完整的 HTTP 工具和详细的日志记录功能。
Функции / 特性
Полная поддержка HTTP-методов / 完整的 HTTP 方法支持: GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS
Расширенное тестирование безопасности / 高级安全测试: Инструмент для отправки «сырых» (raw) запросов для тестирования на проникновение, SQL-инъекций, XSS-тестирования / 原始请求工具,用于渗透测试、SQL 注入、XSS 测试
Полная поддержка параметров / 全参数支持: Заголовки, cookies, тело запроса, тайм-ауты для всех методов / 所有方法支持 Headers、Cookies、Body、超时设置
Автоматическое логирование / 自动日志记录: Все запросы и ответы сохраняются в
~/mcp_requests_logs// 所有请求和响应自动记录到~/mcp_requests_logs/Гарантия точности / 精确保证: Режим «raw» сохраняет каждый символ в точности как предоставлено / 原始模式完全保留每个字符
Совместимость с MCP / MCP 兼容: Работает с Claude Code, Cursor и другими MCP-клиентами / 兼容 Claude Code、Cursor 和其他 MCP 客户端
Related MCP server: http-client-mcp
Установка / 安装
pip install mcp-requestИспользование / 使用方法
С Cursor/Claude Code / 在 Cursor/Claude Code 中使用
Добавьте в конфигурацию MCP (~/.cursor/mcp_servers.json или аналогичный файл):
添加到你的 MCP 配置文件 (~/.cursor/mcp_servers.json 或类似文件):
{
"mcpServers": {
"mcp-request": {
"command": "mcp-request",
"type": "stdio"
}
}
}Доступные инструменты / 可用工具
http_get - GET-запрос с полной поддержкой / 全功能 GET 请求
http_post - POST-запрос с полной поддержкой / 全功能 POST 请求
http_put - PUT-запрос с полной поддержкой / 全功能 PUT 请求
http_delete - DELETE-запрос с полной поддержкой / 全功能 DELETE 请求
http_patch - PATCH-запрос с полной поддержкой / 全功能 PATCH 请求
http_head - HEAD-запрос с полной поддержкой / 全功能 HEAD 请求
http_options - OPTIONS-запрос с полной поддержкой / 全功能 OPTIONS 请求
http_raw_request - 🔒 «Сырые» HTTP-запросы для тестирования безопасности / 🔒 用于安全测试的原始 HTTP 请求
Пример использования / 使用示例
# Basic GET request / 基础 GET 请求
http_get("https://api.example.com/users")
# POST with data and headers / 带数据和请求头的 POST 请求
http_post(
url="https://api.example.com/login",
body='{"username":"test","password":"test"}',
headers={"Content-Type": "application/json"}
)
# Security testing with raw request / 使用原始请求进行安全测试
http_raw_request(
url="https://vulnerable-site.com/search",
method="POST",
raw_body="q=test' OR 1=1--",
headers={"Content-Type": "application/x-www-form-urlencoded"}
)Функции тестирования безопасности / 安全测试特性
Инструмент http_raw_request специально разработан для тестирования безопасности:
http_raw_request 工具专为安全测试设计:
Абсолютная точность / 绝对精确: Каждый символ сохраняется в точности / 每个字符完全保留
Без кодирования / 无编码: Специальные символы (', ", , %, &, =) отправляются как есть / 特殊字符 (', ", , %, &, =) 原样发送
Полные заголовки / 完整请求头: Отсутствие обрезания длинных cookies или токенов / 不截断长 cookies 或 tokens
«Сырые» полезные нагрузки / 原始载荷: Идеально подходит для тестирования SQL-инъекций, XSS, CSRF / 完美适用于 SQL 注入、XSS、CSRF 测试
Логирование / 日志记录
Все HTTP-запросы и ответы автоматически логируются в:
所有 HTTP 请求和响应自动记录到:
Расположение / 位置:
~/mcp_requests_logs/Формат / 格式: JSON с временными метками, полными деталями запроса/ответа / JSON 格式,包含时间戳和完整的请求/响应详情
Имя файла / 文件名:
requests_YYYYMMDD_HHMMSS.log
Просмотр логов / 查看日志:
tail -f ~/mcp_requests_logs/requests_*.logСистемные требования / 系统要求
Python ≥ 3.13
httpx ≥ 0.25.0
mcp[cli] ≥ 1.9.4
Лицензия / 许可证
Лицензия MIT
Вклад / 贡献
Вклад приветствуется! Этот инструмент предназначен исключительно для оборонительного тестирования безопасности и законных целей тестирования API.
欢迎贡献!此工具仅用于防御性安全测试和合法的 API 测试目的。
Available Tools
8 toolshttp_deleteC
HTTP DELETE request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. It mentions that 'All requests logged,' which adds some context about side effects. However, it doesn't cover critical aspects like authentication requirements, rate limits, error handling, or what 'DELETE' actually does to the target resource (destructive nature).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core purpose. Every phrase ('HTTP DELETE request,' 'full support,' 'All requests logged') contributes meaningful information without waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter tool with no annotations and no output schema, the description is incomplete. It lacks details on authentication, error responses, the destructive nature of DELETE, and how to interpret results. The logging mention is helpful but insufficient for full contextual understanding.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It lists 'headers, cookies, body, timeout' as supported features, which maps to 4 of the 5 parameters (missing 'url'). This adds some meaning beyond the bare schema, but doesn't explain parameter purposes, formats, or constraints in detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP DELETE request' with 'full support' for various HTTP features, which is a specific verb+resource combination. However, it doesn't explicitly distinguish this DELETE operation from its sibling tools (GET, HEAD, OPTIONS, etc.) beyond the HTTP method name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this DELETE request versus alternatives like http_raw_request or other HTTP methods. It mentions 'full support' but doesn't specify use cases, prerequisites, or exclusions for DELETE operations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_getC
HTTP GET request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions logging ('All requests logged'), which adds some context, but fails to address critical traits like error handling, response format, authentication needs, or rate limits. For a network tool with zero annotation coverage, this is inadequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (one sentence) and front-loaded with the core purpose. However, the phrase 'with full support' is vague and could be trimmed for clarity, slightly reducing efficiency.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters with 0% schema coverage, no annotations, no output schema, and sibling tools, the description is incomplete. It lacks details on parameter usage, behavioral expectations (e.g., response handling), and differentiation from siblings, making it insufficient for effective tool selection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, meaning parameters are undocumented in the schema. The description lists parameters (headers, cookies, body, timeout) but provides no semantic details—e.g., what format headers/cookies should be in, what body content is allowed for GET, or timeout units. It doesn't compensate for the schema gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP GET request' with specific capabilities (headers, cookies, body, timeout), which is a specific verb+resource combination. However, it doesn't explicitly distinguish this from its sibling tools (http_delete, http_post, etc.) beyond the GET method, missing differentiation that would earn a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like http_post or http_raw_request. It mentions 'full support' but doesn't specify scenarios where GET is appropriate (e.g., retrieving data vs. sending data), leaving the agent without usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_headC
HTTP HEAD request with full support (headers, cookies, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It mentions logging and full support for features, but lacks details on error handling, response format, rate limits, authentication needs, or what 'full support' entails. This is inadequate for a network tool with potential side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with no wasted words. It front-loads the core action (HTTP HEAD request) and lists key features directly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, no output schema, and 0% schema coverage, the description is incomplete. It omits critical details like response behavior, error cases, and practical usage context, making it insufficient for safe and effective tool invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It lists parameters (headers, cookies, timeout) and implies a URL, but doesn't explain their purposes, formats, or constraints (e.g., timeout units, cookie structure). This adds minimal value beyond the schema's property names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP HEAD request' with specific features (headers, cookies, timeout) and mentions logging. It distinguishes from siblings by specifying the HTTP method (HEAD vs GET/POST/etc.), but doesn't explicitly differentiate the purpose beyond the method name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use HEAD vs other HTTP methods (like GET for retrieving body content) or alternatives. The description mentions features but not typical use cases (e.g., checking resource existence, headers without body).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_optionsC
HTTP OPTIONS request with full support (headers, cookies, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It discloses that 'All requests logged', which is a useful behavioral trait beyond the basic operation. However, it lacks details on error handling, response format, authentication needs, or rate limits, leaving gaps for a tool with no annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core action ('HTTP OPTIONS request') and lists key features. It avoids unnecessary words, though it could be slightly more structured (e.g., separating features with commas or bullets).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, no output schema, and 0% schema description coverage, the description is incomplete. It mentions logging but omits critical context like response handling, error scenarios, or typical outputs. For a 4-parameter tool with siblings, more detail is needed to guide effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It mentions 'headers, cookies, timeout' but doesn't explain their purposes, formats, or interactions. For example, it doesn't clarify what 'timeout' units are (seconds), how cookies are formatted, or provide examples. This adds minimal value beyond the schema's property names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP OPTIONS request' with specific features (headers, cookies, timeout), which is a specific verb+resource. It distinguishes from siblings by specifying the HTTP method (OPTIONS) versus DELETE, GET, HEAD, etc., though it doesn't explicitly contrast functionality beyond the method name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like http_get or http_raw_request. It mentions 'full support' but doesn't explain typical use cases for OPTIONS requests (e.g., CORS preflight, server capabilities) or when other HTTP methods might be more appropriate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_patchC
HTTP PATCH request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden. It mentions logging behavior ('All requests logged') which is valuable, but fails to disclose critical behavioral traits like authentication requirements, error handling, rate limits, or what the response format looks like. For a network operation tool with zero annotation coverage, this leaves significant gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficiently structured in a single sentence that communicates the core functionality and key features. It's appropriately sized for the tool's complexity, though it could be slightly more front-loaded by starting with the primary purpose before listing capabilities.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a network operation tool with 5 parameters, no annotations, and no output schema, the description is insufficient. It doesn't explain what the tool returns, error conditions, authentication needs, or practical usage scenarios. The logging mention is helpful but doesn't compensate for the overall lack of context needed to use this tool effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description doesn't add any parameter-specific information beyond what's implied by the tool name. It mentions 'headers, cookies, body, timeout' in a list but doesn't explain their purpose, format, or constraints. The baseline is 3 since the schema provides complete parameter definitions despite lacking descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP PATCH request' with specific capabilities (headers, cookies, body, timeout) and mentions logging. It distinguishes itself from siblings by specifying the HTTP method (PATCH), but doesn't explicitly differentiate from other HTTP method tools beyond the method name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like http_post or http_put. It mentions 'full support' but doesn't explain when PATCH is appropriate compared to other HTTP methods, leaving the agent to infer usage from the method name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_postC
HTTP POST request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden but only mentions logging ('All requests logged'). It lacks critical behavioral details like authentication requirements, error handling, rate limits, or what 'logged' entails (e.g., where logs are stored). This is insufficient for a mutation tool with zero annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero waste. It front-loads the core purpose and includes key features without redundancy, making it highly concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with 5 parameters, 0% schema coverage, no annotations, and no output schema, the description is inadequate. It misses details on response format, error cases, security implications, and practical usage, leaving significant gaps in contextual understanding.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It lists parameters (headers, cookies, body, timeout) but doesn't explain their semantics, formats, or interactions beyond naming them. This adds minimal value over the schema, meeting the baseline for low coverage without fully compensating.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('HTTP POST request') and scope ('with full support (headers, cookies, body, timeout)'), distinguishing it from siblings by specifying POST method. However, it doesn't explicitly contrast with other HTTP methods like GET or PUT, which would make it a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like http_put or http_patch is provided. The description mentions 'full support' but doesn't specify scenarios where POST is appropriate over other HTTP methods, leaving usage context implied at best.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_putC
HTTP PUT request with full support (headers, cookies, body, timeout) - All requests logged
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | ||
| cookies | No | ||
| headers | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. It adds that 'All requests logged', which is useful context about side effects. However, it lacks critical details: whether this is idempotent (typical for PUT), authentication requirements, error handling, rate limits, or what the response contains. For a mutation tool with zero annotation coverage, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero waste. It's front-loaded with the core purpose and includes key features without redundancy. Every word earns its place, making it highly concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (HTTP mutation tool with 5 parameters), no annotations, no output schema, and 0% schema coverage, the description is incomplete. It mentions logging but omits essential context: response format, error behavior, idempotency, authentication, and typical use cases. This leaves the agent under-informed for safe and effective tool invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It lists parameters (headers, cookies, body, timeout) in parentheses, adding some meaning beyond the schema's property names. However, it doesn't explain parameter purposes (e.g., timeout in seconds, body format) or constraints, leaving significant gaps. The baseline is lowered due to poor schema coverage, but the description provides minimal compensation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs an 'HTTP PUT request' with 'full support (headers, cookies, body, timeout)', which specifies the verb (PUT request) and resources (HTTP endpoints). It distinguishes from siblings by mentioning PUT specifically, though it doesn't explicitly contrast with other HTTP methods like POST or PATCH.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like http_post or http_patch. It mentions 'full support' but doesn't explain typical PUT use cases (e.g., updating resources) or prerequisites, leaving the agent to infer usage from the HTTP method name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_raw_requestA
🔒 CRITICAL SECURITY TESTING TOOL: Sends HTTP requests with ABSOLUTE PRECISION - All requests logged
⚠️ IMPORTANT: This tool preserves EVERY SINGLE CHARACTER of your request:
Headers: Every cookie, token, session ID - NO CHARACTER LIMIT, NO TRUNCATION
Body: Raw payload sent byte-for-byte, preserving payloads exactly
Cookies: Complete cookie strings including long JWT tokens, session data
Special characters: ', ", , %, &, =, etc. are preserved without encoding
Whitespace: Spaces, tabs, newlines maintained exactly as provided
🎯 Perfect for: all kinds of security vulnerability testing, testing like SQL injection, XSS, CSRF, authentication bypass, parameter pollution 📝 Guarantee: What you input is EXACTLY what gets sent - zero modifications 📊 All requests and responses are automatically logged to ~/mcp_requests_logs/
| Name | Required | Description | Default |
|---|---|---|---|
| cookies | No | ||
| headers | No | ||
| method | No | GET | |
| raw_body | No | ||
| timeout | No | ||
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden and excels. It discloses critical behavioral traits: preserves all characters exactly (no truncation/encoding), logs all requests/responses to a specific directory (~/mcp_requests_logs/), and guarantees zero modifications to input. This provides essential context about security implications and side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized but not optimally structured. It uses emojis and formatting that may not parse well in all contexts. While information-dense, it could be more front-loaded with the core purpose before details. Every sentence earns its place, but the presentation could be more streamlined for agent consumption.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (security-critical HTTP tool with 6 parameters, no annotations, no output schema), the description does well. It covers behavioral guarantees, logging, use cases, and precision characteristics. However, it doesn't mention error handling, response format expectations, or authentication requirements that might be relevant for a raw HTTP tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. While it doesn't explicitly name parameters, it provides crucial semantic context for several: explains how headers/cookies/body parameters are handled (preserved exactly), mentions special character handling relevant to all string parameters, and implies timeout behavior through the precision focus. However, it doesn't cover all 6 parameters explicitly.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool 'sends HTTP requests with ABSOLUTE PRECISION' and emphasizes it's for 'security testing'. It distinguishes from sibling tools (http_get, http_post, etc.) by highlighting its raw, unmodified request handling rather than being method-specific. The description goes beyond the name/title to explain the specific behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use this tool: 'Perfect for: all kinds of security vulnerability testing, testing like SQL injection, XSS, CSRF, authentication bypass, parameter pollution'. It also implicitly distinguishes from sibling tools by emphasizing raw precision rather than convenience methods. The description provides clear context about appropriate use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
8 tool updates
v1.0.0- First observed
http_delete - First observed
http_get - First observed
http_head - First observed
http_options - First observed
http_patch - First observed
http_post - First observed
http_put - First observed
http_raw_request
TDQS
Each tool has a clearly distinct purpose: seven tools correspond to specific HTTP methods (GET, POST, etc.), while the eighth tool (http_raw_request) is explicitly for security testing with absolute precision. There is no ambiguity or overlap between the standard HTTP method tools, and the security tool is clearly differentiated by its specialized function.
All tool names follow a consistent snake_case pattern with the prefix 'http_' followed by the HTTP method name (e.g., http_get, http_post) or a descriptive term (http_raw_request). This uniformity makes the tools easily predictable and readable, with no deviations in naming conventions.
With 8 tools, the set is well-scoped for an HTTP requests server. It covers all standard HTTP methods (GET, POST, PUT, DELETE, PATCH, HEAD, OPTIONS) plus a specialized security testing tool, which is a reasonable and complete set for the domain without being excessive or insufficient.
The tool surface is complete for the domain of HTTP requests. It provides full CRUD-like coverage with all standard HTTP methods, and the inclusion of http_raw_request adds specialized functionality for security testing, ensuring no gaps in core operations or advanced use cases.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Capture, inspect & debug HTTPS traffic across iOS, Android, browsers & backends — 304 MCP tools.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
MCP server for AI access to Swagger by SmartBear.
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceAn MCP server that provides HTTP client capabilities with browser impersonation for Chrome, Firefox, Safari, and Edge across multiple operating systems. It enables tools for making authenticated web requests, handling multipart file uploads, and retrieving responses in various formats.MIT
- AlicenseNot gradedqualityDmaintenanceAn MCP server that provides HTTP client capabilities with support for full HTTP methods, custom headers, query parameters, request bodies, and configurable timeouts.1MIT
- AlicenseNot gradedqualityCmaintenanceAn MCP server that enables AI agents to intercept, inspect, and modify HTTP traffic, with tools for searching, filtering, and managing captured requests and interceptors.148MIT
- AlicenseNot gradedqualityBmaintenanceHTTP Inspector MCP Server enables sending arbitrary HTTP requests, viewing history via a web panel, and taking screenshots of the panel for AI penetration testing workflows.1GPL 3.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/godzeo/mcp-request'
If you have feedback or need assistance with the MCP directory API, please join our Discord server