rqwstr

Created By
Kjopstad-ITa day ago
AI-native HTTP security testing toolkit (MCP server): 17 HTTP tools giving an AI agent low-level control over HTTP/1.1 and HTTP/2 (raw framing, connection pinning, intruder, race, OOB, chains) on its own Go engine. Free tier; docs at rqwstr.com.
Overview

AI-native HTTP security testing toolkit, shipped as an MCP server. It gives an AI agent low-level control over HTTP/1.1 and HTTP/2 — raw framing, connection pinning, intruder-style fuzzing, request racing, OOB detection, and multi-step chains — on its own Go engine, rather than wrapping a high-level HTTP client.

This repository hosts the release binaries and Claude Desktop .mcpb bundles. The source is proprietary. Docs and sign-up: rqwstr.com.

Install Claude Desktop (one-click) Download the .mcpb for your platform from the latest release and double-click it to add rqwstr as a Claude Desktop extension.

macOS — Apple silicon (darwin_arm64) or Intel (darwin_amd64) Linux — linux_amd64 or linux_arm64 Windows — windows_amd64

Server Config

{
  "mcpServers": {
    "rqwstr": {
      "command": "rqwstr",
      "args": [
        "serve"
      ]
    }
  }
}
Project Info
Created At
a day ago
Updated At
a day ago
Author Name
Kjopstad-IT
Star
-
Language
-
License
-
Category

Recommend Servers

View All
Debmatic Mcp
@claymore666

# debmatic-mcp Connects to a **HomeMatic CCU**'s built-in JSON-RPC API and exposes your devices, rooms, programs, and system variables as MCP tools — **no addons, no XML-API, no cloud**, just a direct connection on your local network. Works with **debmatic**, **CCU3**, and **RaspberryMatic**. ## Features - **25 tools** spanning device control, diagnostics, and configuration - **Read**: list devices/rooms/functions/programs/system variables, read values & paramsets, describe device types, list links - **Control**: set values, run programs, set/create/delete system variables, assign/unassign channels, execute HM-Script - **Diagnostics**: RSSI/radio quality, service messages (read + acknowledge), system info - **Production-hardened**: bearer-token auth with expiry & rotation, optional native TLS, CCU certificate verification (fingerprint pin or CA), rate limiting, DNS-rebinding protection, and structured tool output (`outputSchema`) ## Install ```json { "mcpServers": { "debmatic": { "command": "npx", "args": ["-y", "debmatic-mcp", "--stdio"], "env": { "CCU_HOST": "your-ccu-host", "CCU_PASSWORD": "your-ccu-password" } } } } Configuration Required: CCU_HOST, CCU_PASSWORD Common optional: CCU_USER (default Admin), CCU_HTTPS (default false), CCU_PORT (80/443), CACHE_DIR (default /data) Also runs as a standalone HTTP server (Docker) for networked clients. Full docs in the README. Repo: https://github.com/claymore666/debmatic-mcp · npm: debmatic-mcp · License: MIT

a day ago
Bruno Mcp
@Ostico

A Model Context Protocol (MCP) server for creating, managing, and executing Bruno API testing collections. Supports both .bru and .yml (opencollection) formats with built-in security hardening. Why This MCP Server? Use this when you want an AI agent (Claude, Copilot, etc.) to create, inspect, or execute Bruno API test collections programmatically — without opening the Bruno GUI or installing the Bruno CLI. Typical use cases: AI-assisted test generation, CI pipeline integration, automated API exploration. Requires Node.js >= 18.0.0. Features: - Collection Management: Create and organize Bruno collections - Environment Configuration: Manage multiple environments (dev, staging, prod) - Request Generation: Generate request files for all HTTP methods - Authentication Support: Bearer, Basic, OAuth 2.0, API key, Digest - Test Scripts: Add pre/post request scripts and assertions - CRUD Operations: Generate complete CRUD request sets - Collection Statistics: Analyze existing collections - Dual Format Support: .bru (legacy) and .yml (opencollection YAML) with auto-detection - Collection Discovery: Discover Bruno collections from workspace with zero config - Request Modification: Partial-merge updates to existing request files - Variable Chaining: bru.setVar()/bru.getVar() for cross-request variable flow - Dependency Ordering: Topological sort for test suite execution order - Request Execution: Execute requests and run tests with structured results - Security Hardening: SSRF protection, path traversal prevention, VM sandbox for test scripts

10 hours ago