Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.
nab scores 69 (Good), licensed MIT and written in Rust. It installs as a local process. It does not declare tools yet. Filed under Uncategorized. GitHub shows 16 stars. Install configs are generated for 10 clients. Being listed in the registry is not the same as being vendor-official.
One system around coding agents to run, verify, recover, and hand off software work.
Registry
397 stars535/wk
4 / 20
GitHub stars and weekly downloads, on a log scale.
Popularity: 4 of 20 points.
License10 / 10
A clear, OSI-style open-source license.
License: 10 of 10 points.
Security10 / 10
Not archived, a secure install path, a pinned version.
Security: 10 of 10 points.
Docs3 / 10
A real summary, a README with depth, listed tools.
Docs: 3 of 10 points.
Environment variables
Name
Required
Notes
NAB_SSRF_ALLOW_PRIVATE
Optional
Set to allow fetching private/internal IP addresses (corporate dashboards). Never unblocks loopback, link-local/cloud-metadata, or other always-denied ranges. Off by default.
NAB_SSRF_ALLOWLIST
Optional
Comma-separated list of private IP/CIDR ranges to exempt from the SSRF guard (e.g. 10.252.0.0/16,192.168.1.5). Narrower, preferred alternative to NAB_SSRF_ALLOW_PRIVATE. Empty by default.
NAB_WEBMCP_STRICT
Optional
Set to a truthy value to require fetched pages advertising a WebMCP manifest to match NAB_WEBMCP_OPT_IN before ingestion is allowed (defense against prompt injection via fetched content). Off by default.
NAB_WEBMCP_OPT_IN
Optional
Comma-separated allowlist consulted when NAB_WEBMCP_STRICT is enabled. Empty by default.
NAB_STATE_DIR
Optional
Overrides the directory used to persist session/cookie state (default: ~/.nab).
NAB_KEYCHAIN_INTERACTION
Optional
Controls whether cookie extraction may prompt macOS Keychain for authorization. Set to 'never' in automated/headless callers so a background fetch cannot open a GUI dialog.
NAB_OP_BIN
Optional
Path to the 1Password CLI binary used for credential retrieval during the login tool (default: op).
NAB_MCP_CLI_BIN
Optional
Path to the mcp-cli binary used for MCP-based credential retrieval (default: mcp-cli).
NAB_NO_TELEMETRY
Optional
Set to anything other than 0 or false to skip the daily heartbeat. NO_TELEMETRY and DO_NOT_TRACK do the same.
NAB_TELEMETRY_ENDPOINT
Optional
Replace the daily heartbeat URL. An empty value leaves the default.
Tools show up when the registry metadata or the repository README lists them. Public READMEs are read directly. A GitHub token is used only when one is already configured.
About
Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.
FAQ
?What is nab?
Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.
?How do I install nab?
Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
?Is nab official?
No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
?How is the trust score calculated?
This listing scores 69 (Good). The formula is published on the methodology page.
Reviews
No reviews yet
—Be the first to review
5 star0 reviews at 5 stars
4 star0 reviews at 4 stars
3 star0 reviews at 3 stars
2 star0 reviews at 2 stars
1 star0 reviews at 1 stars
No published reviews yet. Used it? Tell the next person how it went.
Sign inA verified email is required to review this server.
