@mcp-consultant-tools/rest-api

MCP server for REST API testing with OAuth2 client credentials support. Enables AI assistants to test HTTP endpoints with automatic JWT token generation.

Features

• HTTP Methods: GET, POST, PUT, DELETE, PATCH
• OAuth2 Client Credentials: Automatic JWT token acquisition and caching
• Multiple Auth Methods: Bearer token, Basic auth, API key
• Response Management: Size limiting, truncation, timing
• SSL Control: Enable/disable certificate verification
• Custom Headers: Configure via environment variables
• Batch Requests: Execute multiple requests sequentially

Quick Start

Installation

# As standalone
npx @mcp-consultant-tools/rest-api

# Or install globally
npm install -g @mcp-consultant-tools/rest-api

MCP Client Configuration

{
  "mcpServers": {
    "rest-api": {
      "command": "npx",
      "args": ["@mcp-consultant-tools/rest-api"],
      "env": {
        "REST_BASE_URL": "https://your-api.azurewebsites.net/api",
        "OAUTH2_TOKEN_URL": "https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token",
        "OAUTH2_CLIENT_ID": "your-client-id",
        "OAUTH2_CLIENT_SECRET": "your-client-secret",
        "OAUTH2_SCOPE": "api://your-app-id/.default"
      }
    }
  }
}

Tools (4)

| Tool | Description | |------|-------------| | rest-request | Execute HTTP requests with automatic authentication | | rest-config | Get current service configuration summary | | rest-refresh-token | Force refresh OAuth2 token cache | | rest-batch-request | Execute multiple requests sequentially |

Prompts (2)

| Prompt | Description | |--------|-------------| | rest-api-guide | Comprehensive usage guide | | rest-api-troubleshoot | Troubleshooting common issues |

Authentication Methods

OAuth2 Client Credentials (Recommended)

Best for Azure/Entra ID protected APIs like Data API Builder (DAB):

OAUTH2_TOKEN_URL=https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token
OAUTH2_CLIENT_ID=your-client-id
OAUTH2_CLIENT_SECRET=your-secret
OAUTH2_SCOPE=api://your-api/.default

Static Bearer Token

AUTH_BEARER=your-pre-acquired-token

Basic Authentication

AUTH_BASIC_USERNAME=user
AUTH_BASIC_PASSWORD=pass

API Key

AUTH_APIKEY_HEADER_NAME=X-Api-Key
AUTH_APIKEY_VALUE=your-key

Configuration Reference

| Variable | Required | Default | Description | |----------|----------|---------|-------------| | REST_BASE_URL | Yes | - | Base URL for API requests | | REST_RESPONSE_SIZE_LIMIT | No | 10000 | Max response size in bytes | | REST_ENABLE_SSL_VERIFY | No | true | SSL certificate verification | | REST_TIMEOUT | No | 30000 | Request timeout in ms | | HEADER_* | No | - | Custom headers (e.g., HEADER_Accept) |

Example Usage

Simple GET Request

Use rest-request with method GET and endpoint /users

POST with Body

Use rest-request with method POST, endpoint /orders, and body {"item": "widget", "qty": 5}

Batch Operations

Use rest-batch-request with an array of requests to test a complete workflow

License

MIT