NestDaddy

nab

io.github.MikkoParkkola/nab · v0.12.6

Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.

Connect Runs on your machine

Terminal
claude mcp add nab -e NAB_SSRF_ALLOW_PRIVATE=<NAB_SSRF_ALLOW_PRIVATE> -e NAB_SSRF_ALLOWLIST=<NAB_SSRF_ALLOWLIST> -e NAB_WEBMCP_STRICT=<NAB_WEBMCP_STRICT> -e NAB_WEBMCP_OPT_IN=<NAB_WEBMCP_OPT_IN> -e NAB_STATE_DIR=<NAB_STATE_DIR> -e NAB_KEYCHAIN_INTERACTION=<NAB_KEYCHAIN_INTERACTION> -e NAB_OP_BIN=<NAB_OP_BIN> -e NAB_MCP_CLI_BIN=<NAB_MCP_CLI_BIN> -e NAB_NO_TELEMETRY=<NAB_NO_TELEMETRY> -e NAB_TELEMETRY_ENDPOINT=<NAB_TELEMETRY_ENDPOINT> -- nab
claude_desktop_config.json
{
  "mcpServers": {
    "nab": {
      "command": "nab",
      "args": [],
      "env": {
        "NAB_SSRF_ALLOW_PRIVATE": "<NAB_SSRF_ALLOW_PRIVATE>",
        "NAB_SSRF_ALLOWLIST": "<NAB_SSRF_ALLOWLIST>",
        "NAB_WEBMCP_STRICT": "<NAB_WEBMCP_STRICT>",
        "NAB_WEBMCP_OPT_IN": "<NAB_WEBMCP_OPT_IN>",
        "NAB_STATE_DIR": "<NAB_STATE_DIR>",
        "NAB_KEYCHAIN_INTERACTION": "<NAB_KEYCHAIN_INTERACTION>",
        "NAB_OP_BIN": "<NAB_OP_BIN>",
        "NAB_MCP_CLI_BIN": "<NAB_MCP_CLI_BIN>",
        "NAB_NO_TELEMETRY": "<NAB_NO_TELEMETRY>",
        "NAB_TELEMETRY_ENDPOINT": "<NAB_TELEMETRY_ENDPOINT>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "nab": {
      "command": "nab",
      "args": [],
      "env": {
        "NAB_SSRF_ALLOW_PRIVATE": "<NAB_SSRF_ALLOW_PRIVATE>",
        "NAB_SSRF_ALLOWLIST": "<NAB_SSRF_ALLOWLIST>",
        "NAB_WEBMCP_STRICT": "<NAB_WEBMCP_STRICT>",
        "NAB_WEBMCP_OPT_IN": "<NAB_WEBMCP_OPT_IN>",
        "NAB_STATE_DIR": "<NAB_STATE_DIR>",
        "NAB_KEYCHAIN_INTERACTION": "<NAB_KEYCHAIN_INTERACTION>",
        "NAB_OP_BIN": "<NAB_OP_BIN>",
        "NAB_MCP_CLI_BIN": "<NAB_MCP_CLI_BIN>",
        "NAB_NO_TELEMETRY": "<NAB_NO_TELEMETRY>",
        "NAB_TELEMETRY_ENDPOINT": "<NAB_TELEMETRY_ENDPOINT>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "nab": {
      "type": "stdio",
      "command": "nab",
      "args": [],
      "env": {
        "NAB_SSRF_ALLOW_PRIVATE": "<NAB_SSRF_ALLOW_PRIVATE>",
        "NAB_SSRF_ALLOWLIST": "<NAB_SSRF_ALLOWLIST>",
        "NAB_WEBMCP_STRICT": "<NAB_WEBMCP_STRICT>",
        "NAB_WEBMCP_OPT_IN": "<NAB_WEBMCP_OPT_IN>",
        "NAB_STATE_DIR": "<NAB_STATE_DIR>",
        "NAB_KEYCHAIN_INTERACTION": "<NAB_KEYCHAIN_INTERACTION>",
        "NAB_OP_BIN": "<NAB_OP_BIN>",
        "NAB_MCP_CLI_BIN": "<NAB_MCP_CLI_BIN>",
        "NAB_NO_TELEMETRY": "<NAB_NO_TELEMETRY>",
        "NAB_TELEMETRY_ENDPOINT": "<NAB_TELEMETRY_ENDPOINT>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
NAB_SSRF_ALLOW_PRIVATE
Optional
Set to allow fetching private/internal IP addresses (corporate dashboards). Never unblocks loopback, link-local/cloud-metadata, or other always-denied ranges. Off by default.
NAB_SSRF_ALLOWLIST
Optional
Comma-separated list of private IP/CIDR ranges to exempt from the SSRF guard (e.g. 10.252.0.0/16,192.168.1.5). Narrower, preferred alternative to NAB_SSRF_ALLOW_PRIVATE. Empty by default.
NAB_WEBMCP_STRICT
Optional
Set to a truthy value to require fetched pages advertising a WebMCP manifest to match NAB_WEBMCP_OPT_IN before ingestion is allowed (defense against prompt injection via fetched content). Off by default.
NAB_WEBMCP_OPT_IN
Optional
Comma-separated allowlist consulted when NAB_WEBMCP_STRICT is enabled. Empty by default.
NAB_STATE_DIR
Optional
Overrides the directory used to persist session/cookie state (default: ~/.nab).
NAB_KEYCHAIN_INTERACTION
Optional
Controls whether cookie extraction may prompt macOS Keychain for authorization. Set to 'never' in automated/headless callers so a background fetch cannot open a GUI dialog.
NAB_OP_BIN
Optional
Path to the 1Password CLI binary used for credential retrieval during the login tool (default: op).
NAB_MCP_CLI_BIN
Optional
Path to the mcp-cli binary used for MCP-based credential retrieval (default: mcp-cli).
NAB_NO_TELEMETRY
Optional
Set to anything other than 0 or false to skip the daily heartbeat. NO_TELEMETRY and DO_NOT_TRACK do the same.
NAB_TELEMETRY_ENDPOINT
Optional
Replace the daily heartbeat URL. An empty value leaves the default.

Details

Package[email protected] (CARGO, stdio)
First published24 Oct 2026
Last updated24 Oct 2026
Registry nameio.github.MikkoParkkola/nab

More files and documents servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.