@dpm-tools/mcp-http-inspect
v0.1.0
Published
MCP server with 5 HTTP/REST debugging tools: request, compare_responses, inspect_cors, decode_jwt_from_header, explain_status. Free, MIT.
Maintainers
Readme
mcp-http-inspect
5 HTTP / REST debugging tools for Claude. Stop pasting curl output. Free, MIT.
Devs constantly paste curl output into Claude. mcp-http-inspect lets Claude/Cursor actually make and inspect HTTP requests — with safety defaults (read-only by default; mutations require explicit allowlist).
Install
{
"mcpServers": {
"http": {
"command": "npx",
"args": ["-y", "@dpm-tools/mcp-http-inspect"]
}
}
}Requires Node.js 22.18+.
Tools (5)
request— Send HTTP requests. GET/HEAD/OPTIONS work by default; POST/PUT/PATCH/DELETE requireallow_mutations: true(safety).compare_responses— Hit two URLs, return structured diff (status, headers, body length, header differences).inspect_cors— Run preflight + actual request, report allAccess-Control-*headers, decide whether a browser would allow it.decode_jwt_from_header— Pull JWT fromAuthorization: Bearer ..., decode header + payload, optionally verify HMAC, flag expiry.explain_status— Get the meaning, RFC link, and common causes for any HTTP status code.
Example prompts
- "GET https://api.github.com/repos/torvalds/linux and show me the rate-limit headers."
- "Compare the response from https://example.com/v1/users and https://example.com/v2/users."
- "Inspect CORS for https://api.openai.com/v1/models from origin https://localhost:3000."
- "Decode this Authorization header: Bearer eyJhbGciOiJIUzI1NiJ9..."
- "What does HTTP 429 mean and what should I do about it?"
See examples/prompts.md for more.
Why this exists
Existing HTTP MCPs are either generic fetch wrappers or paid SaaS API testers. Devs need three specific things repeatedly: inspect a response, compare two endpoints, debug CORS. This server is the focused trio plus JWT + status helpers.
Safety design: mutations (POST/PUT/PATCH/DELETE) are gated behind allow_mutations: true to prevent the LLM from accidentally creating/destroying resources. 5MB response body cap. 30s timeout default.
Sister servers from dpm
mcp-devkit,mcp-public-data,mcp-diff,mcp-archive,mcp-citations,mcp-ical,mcp-dict.
License
MIT © dpm (digital product mill)
