Rest API TesterCAUTION
A TypeScript-based MCP server that enables testing of REST APIs through Cline. This tool allows you to test and interact with any REST API endpoints directly from your development environment.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://opensource.org/licenses/MIT) [](https://www.npmjs.com/package/dkmaker-mcp-rest-api)
A TypeScript-based MCP server that enables testing of REST APIs through Claude, Cline and other MCP clients. This tool allows you to test and interact with any REST API endpoints directly from your development environment.
Installation
Install the package globally:
npm install -g dkmaker-mcp-rest-api
Configuration
Cline Custom Instructions
To ensure Cline understands how to effectively use this tool, add the following to your Cline custom instructions (Settings > Custom Instructions):
# REST API Testing Instructions The `test_request` tool enables testing, debugging, and interacting with REST API endpoints. The tool provides comprehensive request/response information and handles authentication automatically. ## When to Use - Testing specific API endpoints - Debugging API responses - Verifying API functionality - Checking response times - Validating request/response formats - Testing local development servers - Testing API sequences - Verifying error handling ## Key Features - Supports GET, POST, PUT, DELETE, PATCH methods - Handles authentication (Basic, Bearer, API Key) - Normalizes endpoints automatically - Provides detailed response information - Configurable SSL verification and response limits ## Resources The following resources provide detailed documentation: - examples: Usage examples and common patterns - response-format: Response structure and fields - config: Configuration options and setup guide Access these resources to understand usage, response formats, and configuration options. ## Important Notes
cc3c74cf44c0OBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add dkmaker-mcp-rest-api --env AUTH_APIKEY_HEADER_NAME=${AUTH_APIKEY_HEADER_NAME} --env AUTH_APIKEY_VALUE=${AUTH_APIKEY_VALUE} --env AUTH_BASIC_PASSWORD=${AUTH_BASIC_PASSWORD} --env AUTH_BASIC_USERNAME=${AUTH_BASIC_USERNAME} -- npx -y [email protected]{
"mcpServers": {
"dkmaker-mcp-rest-api": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"AUTH_APIKEY_HEADER_NAME": "${AUTH_APIKEY_HEADER_NAME}",
"AUTH_APIKEY_VALUE": "${AUTH_APIKEY_VALUE}",
"AUTH_BASIC_PASSWORD": "${AUTH_BASIC_PASSWORD}",
"AUTH_BASIC_USERNAME": "${AUTH_BASIC_USERNAME}"
}
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
test_request | read | Test a REST API endpoint and get detailed response information. Base URL: ${normalizeBaseUrl(process.env.REST_BASE_URL!)} | SSL Verification ${REST_ENABLE_SSL_VERIFY ? |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (3)
rejectUnauthorized: false
.release-please-manifest.json
@modelcontextprotocol/sdk, axios, @commitlint/cli, @commitlint/config-conventional, @types/node, typescript
Gates applied: no_behavioural_pass.
cc3c74cf44c0full audit observations/trust-audit/mcp-server/dkmaker__rest-api-tester.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | cc3c74cf44c0 | CAUTION | B | 89 | first audit |
Questions
What is the Rest API Tester MCP server?
A TypeScript-based MCP server that enables testing of REST APIs through Cline. This tool allows you to test and interact with any REST API endpoints directly from your development environment.
What tools does Rest API Tester expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Rest API Tester safe to connect to an agent?
With care. The audit graded it B (89/100) and found 3 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Rest API Tester need?
It reads AUTH_APIKEY_HEADER_NAME, AUTH_APIKEY_VALUE, AUTH_BASIC_PASSWORD, AUTH_BASIC_USERNAME and AUTH_BEARER from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Rest API Tester run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as dkmaker-mcp-rest-api at 0.4.0.
How current is this page?
The grade is for one exact copy of the source (cc3c74cf44c0), read on 2026-10-07. The repository is watched and re-audited when it changes.