@mcp-consultant-tools/rest-api 22.0.0-beta.1

package/README.md

@@ -0,0 +1,128 @@
+# @mcp-consultant-tools/rest-api
+
+MCP server for REST API testing with OAuth2 client credentials support. Enables AI assistants to test HTTP endpoints with automatic JWT token generation.
+
+## Features
+
+- **HTTP Methods**: GET, POST, PUT, DELETE, PATCH
+- **OAuth2 Client Credentials**: Automatic JWT token acquisition and caching
+- **Multiple Auth Methods**: Bearer token, Basic auth, API key
+- **Response Management**: Size limiting, truncation, timing
+- **SSL Control**: Enable/disable certificate verification
+- **Custom Headers**: Configure via environment variables
+- **Batch Requests**: Execute multiple requests sequentially
+
+## Quick Start
+
+### Installation
+
+```bash
+# As standalone
+npx @mcp-consultant-tools/rest-api
+
+# Or install globally
+npm install -g @mcp-consultant-tools/rest-api
+```
+
+### MCP Client Configuration
+
+```json
+{
+  "mcpServers": {
+    "rest-api": {
+      "command": "npx",
+      "args": ["@mcp-consultant-tools/rest-api"],
+      "env": {
+        "REST_BASE_URL": "https://your-api.azurewebsites.net/api",
+        "OAUTH2_TOKEN_URL": "https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token",
+        "OAUTH2_CLIENT_ID": "your-client-id",
+        "OAUTH2_CLIENT_SECRET": "your-client-secret",
+        "OAUTH2_SCOPE": "api://your-app-id/.default"
+      }
+    }
+  }
+}
+```
+
+## Tools (4)
+
+| Tool | Description |
+|------|-------------|
+| `rest-request` | Execute HTTP requests with automatic authentication |
+| `rest-config` | Get current service configuration summary |
+| `rest-refresh-token` | Force refresh OAuth2 token cache |
+| `rest-batch-request` | Execute multiple requests sequentially |
+
+## Prompts (2)
+
+| Prompt | Description |
+|--------|-------------|
+| `rest-api-guide` | Comprehensive usage guide |
+| `rest-api-troubleshoot` | Troubleshooting common issues |
+
+## Authentication Methods
+
+### OAuth2 Client Credentials (Recommended)
+
+Best for Azure/Entra ID protected APIs like Data API Builder (DAB):
+
+```bash
+OAUTH2_TOKEN_URL=https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token
+OAUTH2_CLIENT_ID=your-client-id
+OAUTH2_CLIENT_SECRET=your-secret
+OAUTH2_SCOPE=api://your-api/.default
+```
+
+### Static Bearer Token
+
+```bash
+AUTH_BEARER=your-pre-acquired-token
+```
+
+### Basic Authentication
+
+```bash
+AUTH_BASIC_USERNAME=user
+AUTH_BASIC_PASSWORD=pass
+```
+
+### API Key
+
+```bash
+AUTH_APIKEY_HEADER_NAME=X-Api-Key
+AUTH_APIKEY_VALUE=your-key
+```
+
+## Configuration Reference
+
+| Variable | Required | Default | Description |
+|----------|----------|---------|-------------|
+| `REST_BASE_URL` | Yes | - | Base URL for API requests |
+| `REST_RESPONSE_SIZE_LIMIT` | No | 10000 | Max response size in bytes |
+| `REST_ENABLE_SSL_VERIFY` | No | true | SSL certificate verification |
+| `REST_TIMEOUT` | No | 30000 | Request timeout in ms |
+| `HEADER_*` | No | - | Custom headers (e.g., `HEADER_Accept`) |
+
+## Example Usage
+
+### Simple GET Request
+
+```
+Use rest-request with method GET and endpoint /users
+```
+
+### POST with Body
+
+```
+Use rest-request with method POST, endpoint /orders, and body {"item": "widget", "qty": 5}
+```
+
+### Batch Operations
+
+```
+Use rest-batch-request with an array of requests to test a complete workflow
+```
+
+## License
+
+MIT

package/build/RestApiService.d.ts

@@ -0,0 +1,125 @@
+/**
+ * REST API Service
+ *
+ * Provides HTTP request functionality with multiple authentication methods:
+ * - Static Bearer Token
+ * - Basic Authentication
+ * - API Key (custom header)
+ * - OAuth2 Client Credentials Flow (JWT generation)
+ */
+export interface RestApiConfig {
+    /** Base URL for all requests (e.g., "https://api.example.com/v1") */
+    baseUrl: string;
+    /** Response size limit in bytes (default: 10000) */
+    responseSizeLimit?: number;
+    /** Enable SSL certificate verification (default: true) */
+    enableSslVerify?: boolean;
+    /** Static bearer token (mutually exclusive with oauth2) */
+    bearerToken?: string;
+    /** Basic auth credentials */
+    basicAuth?: {
+        username: string;
+        password: string;
+    };
+    /** API key authentication */
+    apiKey?: {
+        headerName: string;
+        value: string;
+    };
+    /** OAuth2 client credentials configuration */
+    oauth2?: {
+        /** Token endpoint URL (e.g., "https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token") */
+        tokenUrl: string;
+        /** OAuth2 Client ID */
+        clientId: string;
+        /** OAuth2 Client Secret */
+        clientSecret: string;
+        /** OAuth2 Scope (e.g., "https://api.example.com/.default") */
+        scope: string;
+        /** Optional grant type (defaults to "client_credentials") */
+        grantType?: string;
+        /** Optional additional token request parameters */
+        additionalParams?: Record<string, string>;
+    };
+    /** Custom headers to include in all requests */
+    customHeaders?: Record<string, string>;
+    /** Request timeout in milliseconds (default: 30000) */
+    timeout?: number;
+}
+export interface RequestOptions {
+    method: "GET" | "POST" | "PUT" | "DELETE" | "PATCH";
+    endpoint: string;
+    body?: any;
+    headers?: Record<string, string>;
+    /** Override base URL for this request only */
+    host?: string;
+}
+export interface RequestResult {
+    request: {
+        url: string;
+        method: string;
+        headers: Record<string, string>;
+        body?: any;
+        authMethod: string;
+    };
+    response: {
+        statusCode: number;
+        statusText: string;
+        timing: string;
+        headers: Record<string, any>;
+        body: any;
+    };
+    validation: {
+        isError: boolean;
+        messages: string[];
+        truncated?: {
+            originalSize: number;
+            returnedSize: number;
+            truncationPoint: number;
+            sizeLimit: number;
+        };
+    };
+}
+export declare class RestApiService {
+    private config;
+    private cachedToken;
+    private httpsAgent;
+    constructor(config: RestApiConfig);
+    /**
+     * Get the current authentication method name
+     */
+    getAuthMethod(): string;
+    /**
+     * Get OAuth2 access token using client credentials flow
+     * Caches token and refreshes when expired
+     */
+    private getOAuth2Token;
+    /**
+     * Get the Authorization header value based on configured auth method
+     */
+    private getAuthHeader;
+    /**
+     * Sanitize headers for display (redact sensitive values)
+     */
+    private sanitizeHeaders;
+    /**
+     * Execute an HTTP request
+     */
+    request(options: RequestOptions): Promise<RequestResult>;
+    /**
+     * Force refresh the OAuth2 token (clears cache)
+     */
+    clearTokenCache(): void;
+    /**
+     * Get configuration summary (safe to display)
+     */
+    getConfigSummary(): {
+        baseUrl: string;
+        authMethod: string;
+        sslVerification: boolean;
+        responseSizeLimit: number;
+        customHeaderCount: number;
+        oauth2TokenUrl?: string;
+    };
+}
+//# sourceMappingURL=RestApiService.d.ts.map

package/build/RestApiService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RestApiService.d.ts","sourceRoot":"","sources":["../src/RestApiService.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAEhB,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,6BAA6B;IAC7B,SAAS,CAAC,EAAE;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IAEF,6BAA6B;IAC7B,MAAM,CAAC,EAAE;QACP,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAEF,8CAA8C;IAC9C,MAAM,CAAC,EAAE;QACP,gGAAgG;QAChG,QAAQ,EAAE,MAAM,CAAC;QACjB,uBAAuB;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,2BAA2B;QAC3B,YAAY,EAAE,MAAM,CAAC;QACrB,8DAA8D;QAC9D,KAAK,EAAE,MAAM,CAAC;QACd,6DAA6D;QAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,mDAAmD;QACnD,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC3C,CAAC;IAEF,gDAAgD;IAChD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvC,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAOD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE;QACP,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,GAAG,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,QAAQ,EAAE;QACR,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;KACX,CAAC;IACF,UAAU,EAAE;QACV,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,SAAS,CAAC,EAAE;YACV,YAAY,EAAE,MAAM,CAAC;YACrB,YAAY,EAAE,MAAM,CAAC;YACrB,eAAe,EAAE,MAAM,CAAC;YACxB,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC;KACH,CAAC;CACH;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,UAAU,CAA0B;gBAEhC,MAAM,EAAE,aAAa;IA+BjC;;OAEG;IACH,aAAa,IAAI,MAAM;IAQvB;;;OAGG;YACW,cAAc;IAoE5B;;OAEG;YACW,aAAa;IAuB3B;;OAEG;IACH,OAAO,CAAC,eAAe;IAoDvB;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAgI9D;;OAEG;IACH,eAAe,IAAI,IAAI;IAKvB;;OAEG;IACH,gBAAgB,IAAI;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,OAAO,CAAC;QACzB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB;CAUF"}

package/build/RestApiService.js

@@ -0,0 +1,300 @@
+/**
+ * REST API Service
+ *
+ * Provides HTTP request functionality with multiple authentication methods:
+ * - Static Bearer Token
+ * - Basic Authentication
+ * - API Key (custom header)
+ * - OAuth2 Client Credentials Flow (JWT generation)
+ */
+import https from "https";
+export class RestApiService {
+    config;
+    cachedToken = null;
+    httpsAgent;
+    constructor(config) {
+        this.config = {
+            responseSizeLimit: 10000,
+            enableSslVerify: true,
+            timeout: 30000,
+            ...config,
+        };
+        // Normalize base URL (remove trailing slashes)
+        this.config.baseUrl = this.config.baseUrl.replace(/\/+$/, "");
+        // Create HTTPS agent if SSL verification is disabled
+        if (!this.config.enableSslVerify) {
+            this.httpsAgent = new https.Agent({ rejectUnauthorized: false });
+        }
+        // Validate mutually exclusive auth methods
+        const authMethods = [
+            this.config.bearerToken ? "bearer" : null,
+            this.config.basicAuth ? "basic" : null,
+            this.config.oauth2 ? "oauth2" : null,
+            this.config.apiKey ? "apikey" : null,
+        ].filter(Boolean);
+        if (authMethods.length > 1) {
+            console.error(`Warning: Multiple auth methods configured (${authMethods.join(", ")}). Only one should be used.`);
+        }
+    }
+    /**
+     * Get the current authentication method name
+     */
+    getAuthMethod() {
+        if (this.config.oauth2)
+            return "oauth2";
+        if (this.config.bearerToken)
+            return "bearer";
+        if (this.config.basicAuth)
+            return "basic";
+        if (this.config.apiKey)
+            return "apikey";
+        return "none";
+    }
+    /**
+     * Get OAuth2 access token using client credentials flow
+     * Caches token and refreshes when expired
+     */
+    async getOAuth2Token() {
+        const oauth2 = this.config.oauth2;
+        if (!oauth2) {
+            throw new Error("OAuth2 configuration not provided");
+        }
+        // Check if we have a valid cached token (with 5 minute buffer)
+        const now = Date.now();
+        if (this.cachedToken && this.cachedToken.expiresAt > now + 5 * 60 * 1000) {
+            return this.cachedToken.accessToken;
+        }
+        console.error("Acquiring new OAuth2 token...");
+        // Build token request body
+        const params = new URLSearchParams();
+        params.append("grant_type", oauth2.grantType || "client_credentials");
+        params.append("client_id", oauth2.clientId);
+        params.append("client_secret", oauth2.clientSecret);
+        params.append("scope", oauth2.scope);
+        // Add any additional parameters
+        if (oauth2.additionalParams) {
+            for (const [key, value] of Object.entries(oauth2.additionalParams)) {
+                params.append(key, value);
+            }
+        }
+        const response = await fetch(oauth2.tokenUrl, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+            },
+            body: params.toString(),
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new Error(`OAuth2 token request failed: ${response.status} ${response.statusText} - ${errorText}`);
+        }
+        const tokenResponse = await response.json();
+        if (!tokenResponse.access_token) {
+            throw new Error("OAuth2 response missing access_token");
+        }
+        // Cache the token
+        // Default to 1 hour expiry if not provided
+        const expiresIn = tokenResponse.expires_in || 3600;
+        this.cachedToken = {
+            accessToken: tokenResponse.access_token,
+            expiresAt: now + expiresIn * 1000,
+        };
+        console.error(`OAuth2 token acquired, expires in ${Math.round(expiresIn / 60)} minutes`);
+        return this.cachedToken.accessToken;
+    }
+    /**
+     * Get the Authorization header value based on configured auth method
+     */
+    async getAuthHeader() {
+        if (this.config.oauth2) {
+            const token = await this.getOAuth2Token();
+            return { name: "Authorization", value: `Bearer ${token}` };
+        }
+        if (this.config.bearerToken) {
+            return { name: "Authorization", value: `Bearer ${this.config.bearerToken}` };
+        }
+        if (this.config.basicAuth) {
+            const { username, password } = this.config.basicAuth;
+            const base64Credentials = Buffer.from(`${username}:${password}`).toString("base64");
+            return { name: "Authorization", value: `Basic ${base64Credentials}` };
+        }
+        if (this.config.apiKey) {
+            return { name: this.config.apiKey.headerName, value: this.config.apiKey.value };
+        }
+        return null;
+    }
+    /**
+     * Sanitize headers for display (redact sensitive values)
+     */
+    sanitizeHeaders(headers, isFromRequest = false) {
+        const sanitized = {};
+        const safeHeaders = new Set([
+            "accept",
+            "accept-language",
+            "content-type",
+            "user-agent",
+            "cache-control",
+            "if-match",
+            "if-none-match",
+            "if-modified-since",
+            "if-unmodified-since",
+        ]);
+        for (const [key, value] of Object.entries(headers)) {
+            const lowerKey = key.toLowerCase();
+            // Always include request-provided headers as-is
+            if (isFromRequest) {
+                sanitized[key] = value;
+                continue;
+            }
+            // Redact auth headers
+            if (lowerKey === "authorization") {
+                sanitized[key] = "[REDACTED]";
+                continue;
+            }
+            // Redact API key header
+            if (this.config.apiKey &&
+                lowerKey === this.config.apiKey.headerName.toLowerCase()) {
+                sanitized[key] = "[REDACTED]";
+                continue;
+            }
+            // Show safe headers, redact others
+            if (safeHeaders.has(lowerKey)) {
+                sanitized[key] = value;
+            }
+            else {
+                sanitized[key] = "[REDACTED]";
+            }
+        }
+        return sanitized;
+    }
+    /**
+     * Execute an HTTP request
+     */
+    async request(options) {
+        const { method, endpoint, body, headers: requestHeaders, host } = options;
+        // Normalize endpoint (ensure leading slash, remove trailing)
+        const normalizedEndpoint = `/${endpoint.replace(/^\/+|\/+$/g, "")}`;
+        // Build full URL
+        const baseUrl = host ? host.replace(/\/+$/, "") : this.config.baseUrl;
+        const fullUrl = `${baseUrl}${normalizedEndpoint}`;
+        // Build headers
+        const headers = {
+            ...this.config.customHeaders,
+            ...requestHeaders,
+        };
+        // Add content-type for JSON body
+        if (body && !headers["Content-Type"] && !headers["content-type"]) {
+            headers["Content-Type"] = "application/json";
+        }
+        // Add auth header
+        const authHeader = await this.getAuthHeader();
+        if (authHeader) {
+            headers[authHeader.name] = authHeader.value;
+        }
+        // Prepare fetch options
+        const fetchOptions = {
+            method,
+            headers,
+        };
+        // Add body for methods that support it
+        if (["POST", "PUT", "PATCH"].includes(method) && body) {
+            fetchOptions.body =
+                typeof body === "string" ? body : JSON.stringify(body);
+        }
+        // Add timeout via AbortController
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.config.timeout || 30000);
+        fetchOptions.signal = controller.signal;
+        const startTime = Date.now();
+        try {
+            const response = await fetch(fullUrl, fetchOptions);
+            clearTimeout(timeoutId);
+            const endTime = Date.now();
+            // Get response body
+            const responseText = await response.text();
+            let responseBody;
+            try {
+                responseBody = JSON.parse(responseText);
+            }
+            catch {
+                responseBody = responseText;
+            }
+            // Get response headers
+            const responseHeaders = {};
+            response.headers.forEach((value, key) => {
+                responseHeaders[key] = value;
+            });
+            // Check response size
+            const bodySize = Buffer.from(responseText).length;
+            const sizeLimit = this.config.responseSizeLimit || 10000;
+            const validation = {
+                isError: response.status >= 400,
+                messages: response.status >= 400
+                    ? [`Request failed with status ${response.status}`]
+                    : ["Request completed successfully"],
+            };
+            if (bodySize > sizeLimit) {
+                responseBody =
+                    typeof responseBody === "string"
+                        ? responseBody.slice(0, sizeLimit)
+                        : JSON.stringify(responseBody).slice(0, sizeLimit);
+                validation.messages.push(`Response truncated: ${sizeLimit} of ${bodySize} bytes returned due to size limit`);
+                validation.truncated = {
+                    originalSize: bodySize,
+                    returnedSize: sizeLimit,
+                    truncationPoint: sizeLimit,
+                    sizeLimit,
+                };
+            }
+            return {
+                request: {
+                    url: fullUrl,
+                    method,
+                    headers: {
+                        ...this.sanitizeHeaders(headers, false),
+                        ...this.sanitizeHeaders(requestHeaders || {}, true),
+                    },
+                    body,
+                    authMethod: this.getAuthMethod(),
+                },
+                response: {
+                    statusCode: response.status,
+                    statusText: response.statusText,
+                    timing: `${endTime - startTime}ms`,
+                    headers: this.sanitizeHeaders(responseHeaders, false),
+                    body: responseBody,
+                },
+                validation,
+            };
+        }
+        catch (error) {
+            clearTimeout(timeoutId);
+            // Handle abort/timeout
+            if (error instanceof Error && error.name === "AbortError") {
+                throw new Error(`Request timeout after ${this.config.timeout}ms`);
+            }
+            throw error;
+        }
+    }
+    /**
+     * Force refresh the OAuth2 token (clears cache)
+     */
+    clearTokenCache() {
+        this.cachedToken = null;
+        console.error("OAuth2 token cache cleared");
+    }
+    /**
+     * Get configuration summary (safe to display)
+     */
+    getConfigSummary() {
+        return {
+            baseUrl: this.config.baseUrl,
+            authMethod: this.getAuthMethod(),
+            sslVerification: this.config.enableSslVerify !== false,
+            responseSizeLimit: this.config.responseSizeLimit || 10000,
+            customHeaderCount: Object.keys(this.config.customHeaders || {}).length,
+            ...(this.config.oauth2 && { oauth2TokenUrl: this.config.oauth2.tokenUrl }),
+        };
+    }
+}
+//# sourceMappingURL=RestApiService.js.map

package/build/RestApiService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RestApiService.js","sourceRoot":"","sources":["../src/RestApiService.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AA2F1B,MAAM,OAAO,cAAc;IACjB,MAAM,CAAgB;IACtB,WAAW,GAAuB,IAAI,CAAC;IACvC,UAAU,CAA0B;IAE5C,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG;YACZ,iBAAiB,EAAE,KAAK;YACxB,eAAe,EAAE,IAAI;YACrB,OAAO,EAAE,KAAK;YACd,GAAG,MAAM;SACV,CAAC;QAEF,+CAA+C;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAE9D,qDAAqD;QACrD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,2CAA2C;QAC3C,MAAM,WAAW,GAAG;YAClB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YACzC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;SACrC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAElB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CACX,8CAA8C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAClG,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,+DAA+D;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;QACtC,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAE/C,2BAA2B;QAC3B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,IAAI,oBAAoB,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAErC,gCAAgC;QAChC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CACxF,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAIxC,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,kBAAkB;QAClB,2CAA2C;QAC3C,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,IAAI,IAAI,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG;YACjB,WAAW,EAAE,aAAa,CAAC,YAAY;YACvC,SAAS,EAAE,GAAG,GAAG,SAAS,GAAG,IAAI;SAClC,CAAC;QAEF,OAAO,CAAC,KAAK,CACX,qCAAqC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC,UAAU,CAC1E,CAAC;QAEF,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1C,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/E,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YACrD,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,iBAAiB,EAAE,EAAE,CAAC;QACxE,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClF,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,eAAe,CACrB,OAA+B,EAC/B,gBAAyB,KAAK;QAE9B,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;YAC1B,QAAQ;YACR,iBAAiB;YACjB,cAAc;YACd,YAAY;YACZ,eAAe;YACf,UAAU;YACV,eAAe;YACf,mBAAmB;YACnB,qBAAqB;SACtB,CAAC,CAAC;QAEH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAEnC,gDAAgD;YAChD,IAAI,aAAa,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACvB,SAAS;YACX,CAAC;YAED,sBAAsB;YACtB,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;gBACjC,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC9B,SAAS;YACX,CAAC;YAED,wBAAwB;YACxB,IACE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAClB,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,EACxD,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC9B,SAAS;YACX,CAAC;YAED,mCAAmC;YACnC,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAuB;QACnC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAE1E,6DAA6D;QAC7D,MAAM,kBAAkB,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC;QAEpE,iBAAiB;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QACtE,MAAM,OAAO,GAAG,GAAG,OAAO,GAAG,kBAAkB,EAAE,CAAC;QAElD,gBAAgB;QAChB,MAAM,OAAO,GAA2B;YACtC,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa;YAC5B,GAAG,cAAc;SAClB,CAAC;QAEF,iCAAiC;QACjC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QAED,kBAAkB;QAClB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9C,CAAC;QAED,wBAAwB;QACxB,MAAM,YAAY,GAAgB;YAChC,MAAM;YACN,OAAO;SACR,CAAC;QAEF,uCAAuC;QACvC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACtD,YAAY,CAAC,IAAI;gBACf,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QAED,kCAAkC;QAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAC1B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAC7B,CAAC;QACF,YAAY,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAExC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACpD,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE3B,oBAAoB;YACpB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,YAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,GAAG,YAAY,CAAC;YAC9B,CAAC;YAED,uBAAuB;YACvB,MAAM,eAAe,GAAwB,EAAE,CAAC;YAChD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACtC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC/B,CAAC,CAAC,CAAC;YAEH,sBAAsB;YACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;YACzD,MAAM,UAAU,GAAgC;gBAC9C,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG;gBAC/B,QAAQ,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG;oBAC9B,CAAC,CAAC,CAAC,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACnD,CAAC,CAAC,CAAC,gCAAgC,CAAC;aACvC,CAAC;YAEF,IAAI,QAAQ,GAAG,SAAS,EAAE,CAAC;gBACzB,YAAY;oBACV,OAAO,YAAY,KAAK,QAAQ;wBAC9B,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;wBAClC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACvD,UAAU,CAAC,QAAQ,CAAC,IAAI,CACtB,uBAAuB,SAAS,OAAO,QAAQ,mCAAmC,CACnF,CAAC;gBACF,UAAU,CAAC,SAAS,GAAG;oBACrB,YAAY,EAAE,QAAQ;oBACtB,YAAY,EAAE,SAAS;oBACvB,eAAe,EAAE,SAAS;oBAC1B,SAAS;iBACV,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP,GAAG,EAAE,OAAO;oBACZ,MAAM;oBACN,OAAO,EAAE;wBACP,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC;wBACvC,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,IAAI,EAAE,EAAE,IAAI,CAAC;qBACpD;oBACD,IAAI;oBACJ,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE;iBACjC;gBACD,QAAQ,EAAE;oBACR,UAAU,EAAE,QAAQ,CAAC,MAAM;oBAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,MAAM,EAAE,GAAG,OAAO,GAAG,SAAS,IAAI;oBAClC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,KAAK,CAAC;oBACrD,IAAI,EAAE,YAAY;iBACnB;gBACD,UAAU;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,uBAAuB;YACvB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,gBAAgB;QAQd,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE;YAChC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,KAAK;YACtD,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,KAAK;YACzD,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM;YACtE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;SAC3E,CAAC;IACJ,CAAC;CACF"}

package/build/index.d.ts

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+/**
+ * @mcp-consultant-tools/rest-api
+ *
+ * MCP server for REST API testing with OAuth2 client credentials support.
+ * Enables AI assistants to test HTTP endpoints with automatic JWT token generation.
+ *
+ * Features:
+ * - HTTP methods: GET, POST, PUT, DELETE, PATCH
+ * - Authentication: Static bearer, Basic auth, API key, OAuth2 client credentials
+ * - Response size limiting and truncation
+ * - SSL verification control
+ * - Custom headers support
+ */
+import { RestApiService } from "./RestApiService.js";
+/**
+ * Register REST API tools and prompts to an MCP server
+ * @param server - The MCP server instance
+ * @param restApiService - Optional pre-configured RestApiService (for testing)
+ */
+export declare function registerRestApiTools(server: any, restApiService?: RestApiService): void;
+/**
+ * Export service class for direct usage
+ */
+export { RestApiService } from "./RestApiService.js";
+export type { RestApiConfig, RequestOptions, RequestResult } from "./RestApiService.js";
+//# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAYH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAgGrD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,GAAG,EACX,cAAc,CAAC,EAAE,cAAc,QAqahC;AAED;;GAEG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC"}

package/build/index.js

@@ -0,0 +1,462 @@
+#!/usr/bin/env node
+/**
+ * @mcp-consultant-tools/rest-api
+ *
+ * MCP server for REST API testing with OAuth2 client credentials support.
+ * Enables AI assistants to test HTTP endpoints with automatic JWT token generation.
+ *
+ * Features:
+ * - HTTP methods: GET, POST, PUT, DELETE, PATCH
+ * - Authentication: Static bearer, Basic auth, API key, OAuth2 client credentials
+ * - Response size limiting and truncation
+ * - SSL verification control
+ * - Custom headers support
+ */
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { pathToFileURL } from "node:url";
+import { realpathSync } from "node:fs";
+import { createMcpServer, createEnvLoader, createErrorResponse, createSuccessResponse, } from "@mcp-consultant-tools/core";
+import { RestApiService } from "./RestApiService.js";
+// Tool count for documentation
+const TOOL_COUNT = 4;
+const PROMPT_COUNT = 2;
+/**
+ * Parse environment variables for custom headers (HEADER_* pattern)
+ */
+function getCustomHeadersFromEnv() {
+    const headers = {};
+    const headerPrefix = /^HEADER_/i;
+    for (const [key, value] of Object.entries(process.env)) {
+        if (headerPrefix.test(key) && value !== undefined) {
+            const headerName = key.replace(headerPrefix, "");
+            headers[headerName] = value;
+        }
+    }
+    return headers;
+}
+/**
+ * Build RestApiConfig from environment variables
+ */
+function buildConfigFromEnv() {
+    const baseUrl = process.env.REST_BASE_URL;
+    if (!baseUrl) {
+        throw new Error("REST_BASE_URL environment variable is required");
+    }
+    const config = {
+        baseUrl,
+        responseSizeLimit: process.env.REST_RESPONSE_SIZE_LIMIT
+            ? parseInt(process.env.REST_RESPONSE_SIZE_LIMIT, 10)
+            : 10000,
+        enableSslVerify: process.env.REST_ENABLE_SSL_VERIFY !== "false",
+        timeout: process.env.REST_TIMEOUT
+            ? parseInt(process.env.REST_TIMEOUT, 10)
+            : 30000,
+        customHeaders: getCustomHeadersFromEnv(),
+    };
+    // OAuth2 client credentials (highest priority)
+    if (process.env.OAUTH2_TOKEN_URL &&
+        process.env.OAUTH2_CLIENT_ID &&
+        process.env.OAUTH2_CLIENT_SECRET &&
+        process.env.OAUTH2_SCOPE) {
+        config.oauth2 = {
+            tokenUrl: process.env.OAUTH2_TOKEN_URL,
+            clientId: process.env.OAUTH2_CLIENT_ID,
+            clientSecret: process.env.OAUTH2_CLIENT_SECRET,
+            scope: process.env.OAUTH2_SCOPE,
+            grantType: process.env.OAUTH2_GRANT_TYPE || "client_credentials",
+        };
+        // Parse additional OAuth2 parameters
+        if (process.env.OAUTH2_ADDITIONAL_PARAMS) {
+            try {
+                config.oauth2.additionalParams = JSON.parse(process.env.OAUTH2_ADDITIONAL_PARAMS);
+            }
+            catch (e) {
+                console.error("Warning: OAUTH2_ADDITIONAL_PARAMS is not valid JSON");
+            }
+        }
+    }
+    // Static bearer token
+    else if (process.env.AUTH_BEARER) {
+        config.bearerToken = process.env.AUTH_BEARER;
+    }
+    // Basic auth
+    else if (process.env.AUTH_BASIC_USERNAME && process.env.AUTH_BASIC_PASSWORD) {
+        config.basicAuth = {
+            username: process.env.AUTH_BASIC_USERNAME,
+            password: process.env.AUTH_BASIC_PASSWORD,
+        };
+    }
+    // API key
+    else if (process.env.AUTH_APIKEY_HEADER_NAME &&
+        process.env.AUTH_APIKEY_VALUE) {
+        config.apiKey = {
+            headerName: process.env.AUTH_APIKEY_HEADER_NAME,
+            value: process.env.AUTH_APIKEY_VALUE,
+        };
+    }
+    return config;
+}
+/**
+ * Register REST API tools and prompts to an MCP server
+ * @param server - The MCP server instance
+ * @param restApiService - Optional pre-configured RestApiService (for testing)
+ */
+export function registerRestApiTools(server, restApiService) {
+    let service = restApiService || null;
+    function getRestApiService() {
+        if (!service) {
+            const config = buildConfigFromEnv();
+            service = new RestApiService(config);
+            console.error("REST API service initialized");
+            console.error(`  Base URL: ${config.baseUrl}`);
+            console.error(`  Auth method: ${service.getAuthMethod()}`);
+            if (config.oauth2) {
+                console.error(`  OAuth2 Token URL: ${config.oauth2.tokenUrl}`);
+            }
+        }
+        return service;
+    }
+    // ============================================================
+    // TOOLS
+    // ============================================================
+    // Tool: rest-request
+    server.tool("rest-request", `Test a REST API endpoint with automatic authentication. Supports GET, POST, PUT, DELETE, PATCH methods. Authentication is handled automatically based on server configuration (OAuth2 client credentials, bearer token, basic auth, or API key). Returns detailed request/response information including timing, headers, and body.`, {
+        method: z
+            .enum(["GET", "POST", "PUT", "DELETE", "PATCH"])
+            .describe("HTTP method to use"),
+        endpoint: z
+            .string()
+            .describe('Endpoint path (e.g., "/users", "/api/v1/orders"). Do not include the full URL - only the path.'),
+        body: z
+            .any()
+            .optional()
+            .describe("Request body for POST/PUT/PATCH requests (object or string)"),
+        headers: z
+            .record(z.string())
+            .optional()
+            .describe("Additional headers for this request. Do not use for auth - configure auth via environment variables."),
+        host: z
+            .string()
+            .optional()
+            .describe("Override base URL for this request only (e.g., 'https://other-api.com')"),
+    }, async ({ method, endpoint, body, headers, host, }) => {
+        try {
+            const restService = getRestApiService();
+            // Validate endpoint doesn't contain full URL
+            const urlPattern = /^(https?:\/\/|www\.)/i;
+            if (urlPattern.test(endpoint)) {
+                return createErrorResponse(new Error(`Invalid endpoint format. Do not include full URLs. Use just the path (e.g., "/api/users") and optionally specify 'host' to override the base URL.`), "rest-request");
+            }
+            const options = {
+                method,
+                endpoint,
+                body,
+                headers,
+                host,
+            };
+            const result = await restService.request(options);
+            return createSuccessResponse(result);
+        }
+        catch (error) {
+            return createErrorResponse(error, "rest-request");
+        }
+    });
+    // Tool: rest-config
+    server.tool("rest-config", "Get the current REST API service configuration summary, including base URL, authentication method, SSL settings, and custom headers count.", {}, async () => {
+        try {
+            const restService = getRestApiService();
+            const summary = restService.getConfigSummary();
+            return createSuccessResponse(summary);
+        }
+        catch (error) {
+            return createErrorResponse(error, "rest-config");
+        }
+    });
+    // Tool: rest-refresh-token
+    server.tool("rest-refresh-token", "Force refresh the OAuth2 access token. Clears the token cache and acquires a new token on the next request. Only relevant when using OAuth2 authentication.", {}, async () => {
+        try {
+            const restService = getRestApiService();
+            const authMethod = restService.getAuthMethod();
+            if (authMethod !== "oauth2") {
+                return createErrorResponse(new Error(`Token refresh only available for OAuth2 authentication. Current auth method: ${authMethod}`), "rest-refresh-token");
+            }
+            restService.clearTokenCache();
+            return createSuccessResponse({
+                message: "OAuth2 token cache cleared. A new token will be acquired on the next request.",
+            });
+        }
+        catch (error) {
+            return createErrorResponse(error, "rest-refresh-token");
+        }
+    });
+    // Tool: rest-batch-request
+    server.tool("rest-batch-request", "Execute multiple REST API requests sequentially. Useful for testing a series of related endpoints or performing a workflow. Returns results for all requests.", {
+        requests: z.array(z.object({
+            method: z.enum(["GET", "POST", "PUT", "DELETE", "PATCH"]),
+            endpoint: z.string(),
+            body: z.any().optional(),
+            headers: z.record(z.string()).optional(),
+            host: z.string().optional(),
+        })).describe("Array of request configurations to execute sequentially"),
+        stopOnError: z
+            .boolean()
+            .optional()
+            .describe("Stop executing remaining requests if one fails (default: false)"),
+    }, async ({ requests, stopOnError = false, }) => {
+        try {
+            const restService = getRestApiService();
+            const results = [];
+            for (let i = 0; i < requests.length; i++) {
+                const req = requests[i];
+                try {
+                    const result = await restService.request(req);
+                    results.push({
+                        index: i,
+                        endpoint: req.endpoint,
+                        success: !result.validation.isError,
+                        result,
+                    });
+                    if (stopOnError && result.validation.isError) {
+                        break;
+                    }
+                }
+                catch (error) {
+                    const errorMessage = error instanceof Error ? error.message : String(error);
+                    results.push({
+                        index: i,
+                        endpoint: req.endpoint,
+                        success: false,
+                        error: errorMessage,
+                    });
+                    if (stopOnError) {
+                        break;
+                    }
+                }
+            }
+            return createSuccessResponse({
+                totalRequests: requests.length,
+                executedRequests: results.length,
+                successfulRequests: results.filter((r) => r.success).length,
+                results,
+            });
+        }
+        catch (error) {
+            return createErrorResponse(error, "rest-batch-request");
+        }
+    });
+    // ============================================================
+    // PROMPTS
+    // ============================================================
+    // Prompt: rest-api-guide
+    server.prompt("rest-api-guide", "Comprehensive guide for using the REST API testing tools", {}, async () => {
+        const markdown = `# REST API Testing Guide
+
+## Overview
+
+This MCP server enables testing REST API endpoints with comprehensive authentication support, including automatic JWT token generation via OAuth2 client credentials flow.
+
+## Available Tools
+
+### 1. rest-request
+Execute a single HTTP request to any REST endpoint.
+
+**Parameters:**
+- \`method\`: HTTP method (GET, POST, PUT, DELETE, PATCH)
+- \`endpoint\`: API path (e.g., "/users", "/api/v1/orders")
+- \`body\`: Request body for POST/PUT/PATCH (optional)
+- \`headers\`: Additional headers (optional)
+- \`host\`: Override base URL (optional)
+
+**Example:**
+\`\`\`json
+{
+  "method": "POST",
+  "endpoint": "/api/users",
+  "body": { "name": "John", "email": "john@example.com" }
+}
+\`\`\`
+
+### 2. rest-config
+Get current service configuration summary.
+
+### 3. rest-refresh-token
+Force refresh OAuth2 token (clears cache).
+
+### 4. rest-batch-request
+Execute multiple requests sequentially.
+
+## Authentication Methods
+
+### OAuth2 Client Credentials (Recommended for APIs)
+Automatically acquires and caches JWT tokens. Tokens are refreshed when expired.
+
+Required environment variables:
+- \`OAUTH2_TOKEN_URL\`: Token endpoint URL
+- \`OAUTH2_CLIENT_ID\`: Client ID
+- \`OAUTH2_CLIENT_SECRET\`: Client secret
+- \`OAUTH2_SCOPE\`: OAuth2 scope
+
+### Static Bearer Token
+For pre-acquired tokens:
+- \`AUTH_BEARER\`: The bearer token value
+
+### Basic Authentication
+- \`AUTH_BASIC_USERNAME\`: Username
+- \`AUTH_BASIC_PASSWORD\`: Password
+
+### API Key
+- \`AUTH_APIKEY_HEADER_NAME\`: Header name
+- \`AUTH_APIKEY_VALUE\`: API key value
+
+## Configuration
+
+### Required
+- \`REST_BASE_URL\`: Base URL for all requests
+
+### Optional
+- \`REST_RESPONSE_SIZE_LIMIT\`: Max response size in bytes (default: 10000)
+- \`REST_ENABLE_SSL_VERIFY\`: SSL verification (default: true)
+- \`REST_TIMEOUT\`: Request timeout in ms (default: 30000)
+- \`HEADER_*\`: Custom headers (e.g., HEADER_Accept=application/json)
+
+## Best Practices
+
+1. **Use OAuth2 for production APIs** - Automatic token management
+2. **Set appropriate response limits** - Prevent memory issues
+3. **Use custom headers wisely** - Don't put secrets in headers
+4. **Enable SSL verification** - Only disable for development
+`;
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: { type: "text", text: markdown },
+                },
+            ],
+        };
+    });
+    // Prompt: rest-api-troubleshoot
+    server.prompt("rest-api-troubleshoot", "Troubleshooting guide for common REST API testing issues", {}, async () => {
+        const markdown = `# REST API Troubleshooting Guide
+
+## Common Issues and Solutions
+
+### 1. Authentication Failures
+
+**Symptom:** 401 Unauthorized or 403 Forbidden responses
+
+**Solutions:**
+- For OAuth2: Check token URL, client ID, client secret, and scope
+- Use \`rest-refresh-token\` to force a new token
+- Verify scope matches API requirements
+- Check if credentials have expired
+
+### 2. Connection Issues
+
+**Symptom:** ECONNREFUSED, ETIMEDOUT, or network errors
+
+**Solutions:**
+- Verify REST_BASE_URL is correct
+- Check if API is accessible from your network
+- For self-signed certs, set REST_ENABLE_SSL_VERIFY=false (dev only)
+- Increase REST_TIMEOUT for slow APIs
+
+### 3. Response Truncation
+
+**Symptom:** Response body appears cut off
+
+**Solution:** Increase REST_RESPONSE_SIZE_LIMIT environment variable
+
+### 4. Token Expiration
+
+**Symptom:** Requests work initially then fail with 401
+
+**Solution:**
+- OAuth2 tokens are auto-refreshed, but you can force with rest-refresh-token
+- For static bearer tokens, manually update AUTH_BEARER
+
+### 5. CORS Issues
+
+**Note:** MCP servers run server-side, so CORS doesn't apply.
+If you see CORS-related errors, the issue is elsewhere.
+
+## Debugging Steps
+
+1. Use \`rest-config\` to verify current configuration
+2. Try a simple GET request first
+3. Check response timing for network issues
+4. Examine response headers for error details
+5. Use \`rest-refresh-token\` if auth seems stale
+
+## Environment Variable Reference
+
+\`\`\`bash
+# Required
+REST_BASE_URL=https://api.example.com
+
+# OAuth2 (recommended)
+OAUTH2_TOKEN_URL=https://login.example.com/oauth2/token
+OAUTH2_CLIENT_ID=your-client-id
+OAUTH2_CLIENT_SECRET=your-secret
+OAUTH2_SCOPE=api://your-app/.default
+
+# Alternative: Static bearer
+AUTH_BEARER=your-token
+
+# Alternative: Basic auth
+AUTH_BASIC_USERNAME=user
+AUTH_BASIC_PASSWORD=pass
+
+# Alternative: API key
+AUTH_APIKEY_HEADER_NAME=X-Api-Key
+AUTH_APIKEY_VALUE=your-key
+
+# Optional settings
+REST_RESPONSE_SIZE_LIMIT=50000
+REST_ENABLE_SSL_VERIFY=true
+REST_TIMEOUT=60000
+
+# Custom headers
+HEADER_Accept=application/json
+HEADER_X-Custom=value
+\`\`\`
+`;
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: { type: "text", text: markdown },
+                },
+            ],
+        };
+    });
+    console.error(`REST API tools registered: ${TOOL_COUNT} tools, ${PROMPT_COUNT} prompts`);
+}
+/**
+ * Export service class for direct usage
+ */
+export { RestApiService } from "./RestApiService.js";
+/**
+ * Standalone CLI server (when run directly)
+ */
+if (import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href) {
+    const loadEnv = createEnvLoader();
+    loadEnv();
+    const server = createMcpServer({
+        name: "@mcp-consultant-tools/rest-api",
+        version: "1.0.0",
+        capabilities: {
+            tools: {},
+            prompts: {},
+        },
+    });
+    registerRestApiTools(server);
+    const transport = new StdioServerTransport();
+    server.connect(transport).catch((error) => {
+        console.error("Failed to start REST API MCP server:", error);
+        process.exit(1);
+    });
+    console.error("@mcp-consultant-tools/rest-api server running on stdio");
+}
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EACL,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,+BAA+B;AAC/B,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB;;GAEG;AACH,SAAS,uBAAuB;IAC9B,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,WAAW,CAAC;IAEjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB;IACzB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAAkB;QAC5B,OAAO;QACP,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;YACrD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACpD,CAAC,CAAC,KAAK;QACT,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO;QAC/D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;YAC/B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;YACxC,CAAC,CAAC,KAAK;QACT,aAAa,EAAE,uBAAuB,EAAE;KACzC,CAAC;IAEF,+CAA+C;IAC/C,IACE,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,OAAO,CAAC,GAAG,CAAC,YAAY,EACxB,CAAC;QACD,MAAM,CAAC,MAAM,GAAG;YACd,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;YACtC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;YACtC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;YAC9C,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;YAC/B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,oBAAoB;SACjE,CAAC;QAEF,qCAAqC;QACrC,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,CAAC,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,KAAK,CACzC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CACrC,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;IACH,CAAC;IACD,sBAAsB;SACjB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC/C,CAAC;IACD,aAAa;SACR,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC5E,MAAM,CAAC,SAAS,GAAG;YACjB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;YACzC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;SAC1C,CAAC;IACJ,CAAC;IACD,UAAU;SACL,IACH,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAC7B,CAAC;QACD,MAAM,CAAC,MAAM,GAAG;YACd,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;YAC/C,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;SACrC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAW,EACX,cAA+B;IAE/B,IAAI,OAAO,GAA0B,cAAc,IAAI,IAAI,CAAC;IAE5D,SAAS,iBAAiB;QACxB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpC,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC9C,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,kBAAkB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,uBAAuB,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,+DAA+D;IAC/D,QAAQ;IACR,+DAA+D;IAE/D,qBAAqB;IACrB,MAAM,CAAC,IAAI,CACT,cAAc,EACd,qUAAqU,EACrU;QACE,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;aAC/C,QAAQ,CAAC,oBAAoB,CAAC;QACjC,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,QAAQ,CACP,gGAAgG,CACjG;QACH,IAAI,EAAE,CAAC;aACJ,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CAAC,6DAA6D,CAAC;QAC1E,OAAO,EAAE,CAAC;aACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aAClB,QAAQ,EAAE;aACV,QAAQ,CACP,sGAAsG,CACvG;QACH,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,yEAAyE,CAC1E;KACJ,EACD,KAAK,EAAE,EACL,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,IAAI,GAOL,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;YAExC,6CAA6C;YAC7C,MAAM,UAAU,GAAG,uBAAuB,CAAC;YAC3C,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,OAAO,mBAAmB,CACxB,IAAI,KAAK,CACP,mJAAmJ,CACpJ,EACD,cAAc,CACf,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAmB;gBAC9B,MAAM;gBACN,QAAQ;gBACR,IAAI;gBACJ,OAAO;gBACP,IAAI;aACL,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClD,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,oBAAoB;IACpB,MAAM,CAAC,IAAI,CACT,aAAa,EACb,4IAA4I,EAC5I,EAAE,EACF,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC;YAC/C,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,mBAAmB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,2BAA2B;IAC3B,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,6JAA6J,EAC7J,EAAE,EACF,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC;YAE/C,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC5B,OAAO,mBAAmB,CACxB,IAAI,KAAK,CACP,gFAAgF,UAAU,EAAE,CAC7F,EACD,oBAAoB,CACrB,CAAC;YACJ,CAAC;YAED,WAAW,CAAC,eAAe,EAAE,CAAC;YAC9B,OAAO,qBAAqB,CAAC;gBAC3B,OAAO,EAAE,+EAA+E;aACzF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,2BAA2B;IAC3B,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,+JAA+J,EAC/J;QACE,QAAQ,EAAE,CAAC,CAAC,KAAK,CACf,CAAC,CAAC,MAAM,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;YACxB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC5B,CAAC,CACH,CAAC,QAAQ,CAAC,yDAAyD,CAAC;QACrE,WAAW,EAAE,CAAC;aACX,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,iEAAiE,CAAC;KAC/E,EACD,KAAK,EAAE,EACL,QAAQ,EACR,WAAW,GAAG,KAAK,GAIpB,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;YACxC,MAAM,OAAO,GAMP,EAAE,CAAC;YAET,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAExB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC9C,OAAO,CAAC,IAAI,CAAC;wBACX,KAAK,EAAE,CAAC;wBACR,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO;wBACnC,MAAM;qBACP,CAAC,CAAC;oBAEH,IAAI,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;wBAC7C,MAAM;oBACR,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACzD,OAAO,CAAC,IAAI,CAAC;wBACX,KAAK,EAAE,CAAC;wBACR,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,YAAY;qBACpB,CAAC,CAAC;oBAEH,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,qBAAqB,CAAC;gBAC3B,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,gBAAgB,EAAE,OAAO,CAAC,MAAM;gBAChC,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;gBAC3D,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,+DAA+D;IAC/D,UAAU;IACV,+DAA+D;IAE/D,yBAAyB;IACzB,MAAM,CAAC,MAAM,CACX,gBAAgB,EAChB,0DAA0D,EAC1D,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4EtB,CAAC;QACI,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC1C;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,gCAAgC;IAChC,MAAM,CAAC,MAAM,CACX,uBAAuB,EACvB,0DAA0D,EAC1D,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmFtB,CAAC;QACI,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC1C;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,KAAK,CACX,8BAA8B,UAAU,WAAW,YAAY,UAAU,CAC1E,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD;;GAEG;AACH,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,OAAO,EAAE,CAAC;IAEV,MAAM,MAAM,GAAG,eAAe,CAAC;QAC7B,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,EAAE;SACZ;KACF,CAAC,CAAC;IAEH,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;QAC/C,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;AAC1E,CAAC"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@mcp-consultant-tools/rest-api",
+  "version": "22.0.0-beta.1",
+  "description": "MCP server for REST API testing with OAuth2 client credentials support - test HTTP endpoints with automatic JWT token generation",
+  "type": "module",
+  "main": "./build/index.js",
+  "types": "./build/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./build/index.js",
+      "types": "./build/index.d.ts"
+    }
+  },
+  "files": [
+    "build",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf build *.tsbuildinfo",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "rest",
+    "api",
+    "http",
+    "oauth2",
+    "jwt",
+    "client-credentials",
+    "authentication",
+    "testing",
+    "data-api-builder",
+    "dab"
+  ],
+  "author": "Michal Sobieraj",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/klemensms/mcp-consultant-tools.git",
+    "directory": "packages/rest-api"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@mcp-consultant-tools/core": "^20.0.0",
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "zod": "^3.24.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.5",
+    "typescript": "^5.8.2"
+  },
+  "bin": {
+    "mcp-rest-api": "build/index.js"
+  }
+}