Skip to content

http v0.1.0

Latest
Latest

Choose a tag to compare

View all tags
@Abhishekkumar2021 Abhishekkumar2021 released this 04 Jul 21:33
http-v0.1.0
dec6a82

First release of @abhishekmcp/http — an HTTP/REST client MCP server.

  • Ad-hoc request + saved collections/environments (run_request, save/list/get/delete_request, list_collections, set/get/list/delete_environment) + import_curl/export_curl
  • Defense-first SSRF: a required HTTP_ALLOW_HOSTS allowlist, resolved- and literal-IP validation (incl. bracketed IPv6) blocking private/loopback/link-local/metadata unless HTTP_ALLOW_PRIVATE=1, and per-redirect re-validation with a pinned lookup
  • Gated writes: POST/PUT/PATCH/DELETE only with HTTP_WRITABLE=1
  • Secrets via HTTP_SECRET_* (${secret.name}), never on disk, redacted everywhere; env vars via ${var}
  • Pure Node built-ins; response size cap, timeout, decompression-output cap

Install: npx -y @abhishekmcp/http · Claude Code: /plugin install http · Claude Desktop: drag the http-0.1.0.mcpb below.

Note: 0.1.0 was bootstrapped to npm manually; the attached MCPB is uploaded here directly.

Assets 3
Loading