nab MCP Server
Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.
nab scores 69 (Good), licensed MIT and written in Rust. It installs as a local process. It does not declare tools yet. Filed under Uncategorized. GitHub shows 16 stars. Install configs are generated for 10 clients. Being listed in the registry is not the same as being vendor-official.
Good trust
69 of 100 from six public signals. Nobody can buy a point.
- Listed in the official MCP registry.
- OSI-style license: mit.
Where the 69 comes from
22 + 20 + 4 + 10 + 10 + 3 = 69. Each factor is capped, so no single signal can carry a listing.
Active in the official MCP registry, plus a known vendor namespace.
Registry: 22 of 30 points.How recently the repository saw a commit or release.
Maintenance: 20 of 20 points.GitHub stars and weekly downloads, on a log scale.
Popularity: 4 of 20 points.A clear, OSI-style open-source license.
License: 10 of 10 points.Not archived, a secure install path, a pinned version.
Security: 10 of 10 points.A real summary, a README with depth, listed tools.
Docs: 3 of 10 points.Install
Pick your client, copy the config, paste it in.
{ "mcpServers": { "mikkoparkkola-nab": { "command": "npx", "args": [ "-y", "[email protected]" ], "env": { "NAB_SSRF_ALLOW_PRIVATE": "", "NAB_SSRF_ALLOWLIST": "", "NAB_WEBMCP_STRICT": "", "NAB_WEBMCP_OPT_IN": "", "NAB_STATE_DIR": "", "NAB_KEYCHAIN_INTERACTION": "", "NAB_OP_BIN": "", "NAB_MCP_CLI_BIN": "", "NAB_NO_TELEMETRY": "", "NAB_TELEMETRY_ENDPOINT": "" } } }}
Environment variables
| Name | Required | Notes |
|---|---|---|
NAB_SSRF_ALLOW_PRIVATE | Optional | Set to allow fetching private/internal IP addresses (corporate dashboards). Never unblocks loopback, link-local/cloud-metadata, or other always-denied ranges. Off by default. |
NAB_SSRF_ALLOWLIST | Optional | Comma-separated list of private IP/CIDR ranges to exempt from the SSRF guard (e.g. 10.252.0.0/16,192.168.1.5). Narrower, preferred alternative to NAB_SSRF_ALLOW_PRIVATE. Empty by default. |
NAB_WEBMCP_STRICT | Optional | Set to a truthy value to require fetched pages advertising a WebMCP manifest to match NAB_WEBMCP_OPT_IN before ingestion is allowed (defense against prompt injection via fetched content). Off by default. |
NAB_WEBMCP_OPT_IN | Optional | Comma-separated allowlist consulted when NAB_WEBMCP_STRICT is enabled. Empty by default. |
NAB_STATE_DIR | Optional | Overrides the directory used to persist session/cookie state (default: ~/.nab). |
NAB_KEYCHAIN_INTERACTION | Optional | Controls whether cookie extraction may prompt macOS Keychain for authorization. Set to 'never' in automated/headless callers so a background fetch cannot open a GUI dialog. |
NAB_OP_BIN | Optional | Path to the 1Password CLI binary used for credential retrieval during the login tool (default: op). |
NAB_MCP_CLI_BIN | Optional | Path to the mcp-cli binary used for MCP-based credential retrieval (default: mcp-cli). |
NAB_NO_TELEMETRY | Optional | Set to anything other than 0 or false to skip the daily heartbeat. NO_TELEMETRY and DO_NOT_TRACK do the same. |
NAB_TELEMETRY_ENDPOINT | Optional | Replace the daily heartbeat URL. An empty value leaves the default. |
Tools
All capabilitiesTools show up when the registry metadata or the repository README lists them. Public READMEs are read directly. A GitHub token is used only when one is already configured.
About
Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.
FAQ
- What is nab?
- Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.
- How do I install nab?
- Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
- Is nab official?
- No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
- How is the trust score calculated?
- This listing scores 69 (Good). The formula is published on the methodology page.
Reviews
No reviews yet—Be the first to review
No published reviews yet. Used it? Tell the next person how it went.
Sign inA verified email is required to review this server.