Nab
io.github.MikkoParkkola
Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.
{ "mcpServers": { "io.github.mikkoparkkola-nab": { "command": "cargo", "args": [ "nab" ], "env": { "NAB_SSRF_ALLOW_PRIVATE": "<value>", "NAB_SSRF_ALLOWLIST": "<value>", "NAB_WEBMCP_STRICT": "<value>", "NAB_WEBMCP_OPT_IN": "<value>", "NAB_STATE_DIR": "<value>", "NAB_KEYCHAIN_INTERACTION": "<value>", "NAB_OP_BIN": "<value>", "NAB_MCP_CLI_BIN": "<value>", "NAB_NO_TELEMETRY": "<value>", "NAB_TELEMETRY_ENDPOINT": "<value>" } } }}.cursor/mcp.jsonMCP server
- Transport
- stdio
- Status
- Local
Power your agent
Add this server
The publisher's own command. Not a PlugMCP endpoint.
Host a copy with our keys and logs.
Local command
cargo nabCredentials from the publisher
- NAB_SSRF_ALLOW_PRIVATE — Set to allow fetching private/internal IP addresses (corporate dashboards). Never unblocks loopback, link-local/cloud-metadata, or other always-denied ranges. Off by default.
- NAB_SSRF_ALLOWLIST — Comma-separated list of private IP/CIDR ranges to exempt from the SSRF guard (e.g. 10.252.0.0/16,192.168.1.5). Narrower, preferred alternative to NAB_SSRF_ALLOW_PRIVATE. Empty by default.
- NAB_WEBMCP_STRICT — Set to a truthy value to require fetched pages advertising a WebMCP manifest to match NAB_WEBMCP_OPT_IN before ingestion is allowed (defense against prompt injection via fetched content). Off by default.
- NAB_WEBMCP_OPT_IN — Comma-separated allowlist consulted when NAB_WEBMCP_STRICT is enabled. Empty by default.
- NAB_STATE_DIR — Overrides the directory used to persist session/cookie state (default: ~/.nab).
- NAB_KEYCHAIN_INTERACTION — Controls whether cookie extraction may prompt macOS Keychain for authorization. Set to 'never' in automated/headless callers so a background fetch cannot open a GUI dialog.
- NAB_OP_BIN — Path to the 1Password CLI binary used for credential retrieval during the login tool (default: op).
- NAB_MCP_CLI_BIN — Path to the mcp-cli binary used for MCP-based credential retrieval (default: mcp-cli).
- NAB_NO_TELEMETRY — Set to anything other than 0 or false to skip the daily heartbeat. NO_TELEMETRY and DO_NOT_TRACK do the same.
- NAB_TELEMETRY_ENDPOINT — Replace the daily heartbeat URL. An empty value leaves the default.
Claude Code has no install link for a local command. Copy the command below and run it in a terminal.
shClaude Code
NAB_SSRF_ALLOW_PRIVATE=<value> NAB_SSRF_ALLOWLIST=<value> NAB_WEBMCP_STRICT=<value> NAB_WEBMCP_OPT_IN=<value> NAB_STATE_DIR=<value> NAB_KEYCHAIN_INTERACTION=<value> NAB_OP_BIN=<value> NAB_MCP_CLI_BIN=<value> NAB_NO_TELEMETRY=<value> NAB_TELEMETRY_ENDPOINT=<value> claude mcp add io.github.mikkoparkkola-nab -- cargo nabRun in a terminal.
jsonClaude Desktop
{ "mcpServers": { "io.github.mikkoparkkola-nab": { "command": "cargo", "args": [ "nab" ], "env": { "NAB_SSRF_ALLOW_PRIVATE": "<value>", "NAB_SSRF_ALLOWLIST": "<value>", "NAB_WEBMCP_STRICT": "<value>", "NAB_WEBMCP_OPT_IN": "<value>", "NAB_STATE_DIR": "<value>", "NAB_KEYCHAIN_INTERACTION": "<value>", "NAB_OP_BIN": "<value>", "NAB_MCP_CLI_BIN": "<value>", "NAB_NO_TELEMETRY": "<value>", "NAB_TELEMETRY_ENDPOINT": "<value>" } } }}claude_desktop_config.json
Local · cargoPublisher installStep-by-step: add this in Claude
Remote URL or a command on your machine? How the two installs differ
Run on PlugMCP
Host a copy with our keys and logs.
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
LaunchServer facts
Local- Transport
- stdio
- Version
- 0.12.6
- API key
- NAB_SSRF_ALLOW_PRIVATE, NAB_SSRF_ALLOWLIST, NAB_WEBMCP_STRICT, NAB_WEBMCP_OPT_IN, NAB_STATE_DIR, NAB_KEYCHAIN_INTERACTION, NAB_OP_BIN, NAB_MCP_CLI_BIN, NAB_NO_TELEMETRY, NAB_TELEMETRY_ENDPOINT
- Last checked
- 2026-10-26
- Stars
- —
- Tools
- —
- Uptime
- —
Tools
Tools
No tool list yet. Remote servers get one after the first health check.
FAQ
Questions
How do I install Nab?
Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.
Does Nab need an API key?
The publisher lists these environment variables: NAB_SSRF_ALLOW_PRIVATE, NAB_SSRF_ALLOWLIST, NAB_WEBMCP_STRICT, NAB_WEBMCP_OPT_IN, NAB_STATE_DIR, NAB_KEYCHAIN_INTERACTION, NAB_OP_BIN, NAB_MCP_CLI_BIN, NAB_NO_TELEMETRY, NAB_TELEMETRY_ENDPOINT.
What transport does Nab use?
Nab runs locally over stdio.
When was Nab last checked?
Last checked 2026-10-26. Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.
From the publisher
Documentation
README is not crawled yet. Open the repository