HTTP/REST client with saved collections, env secrets, and SSRF-safe host allowlisting.
Connect Runs on your machine
claude mcp add http -e HTTP_ALLOW_HOSTS=<HTTP_ALLOW_HOSTS> -e HTTP_WRITABLE=<HTTP_WRITABLE> -- npx -y @abhishekmcp/[email protected]{
"mcpServers": {
"http": {
"command": "npx",
"args": [
"-y",
"@abhishekmcp/[email protected]"
],
"env": {
"HTTP_ALLOW_HOSTS": "<HTTP_ALLOW_HOSTS>",
"HTTP_WRITABLE": "<HTTP_WRITABLE>"
}
}
}
}{
"mcpServers": {
"http": {
"command": "npx",
"args": [
"-y",
"@abhishekmcp/[email protected]"
],
"env": {
"HTTP_ALLOW_HOSTS": "<HTTP_ALLOW_HOSTS>",
"HTTP_WRITABLE": "<HTTP_WRITABLE>"
}
}
}
}{
"servers": {
"http": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@abhishekmcp/[email protected]"
],
"env": {
"HTTP_ALLOW_HOSTS": "<HTTP_ALLOW_HOSTS>",
"HTTP_WRITABLE": "<HTTP_WRITABLE>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
HTTP_ALLOW_HOSTSRequired | Comma-separated allowed hosts (exact or *.example.com). Required — the server refuses to start without it. |
HTTP_WRITABLEOptional | Set to 1 or true to allow mutating methods (POST/PUT/PATCH/DELETE). |
Details
| Package | @abhishekmcp/[email protected] (NPM, stdio) |
| First published | 4 Jul 2026 |
| Last updated | 4 Jul 2026 |
| Registry name | io.github.Abhishekkumar2021/http |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.