rest_api_mcp

A Model Context Protocol (MCP) server for authenticated REST APIs. Drop it into any project, point it at your API, and let AI agents call endpoints — with auto-login, 2FA support, Swagger spec fetch, and fuzzy endpoint search — all without writing a single line of auth code.

→ Muhammed-AbdelGhany/rest_api_mcp · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

2 flows detected: API_SWAGGER_URL, API_VERIFY_ENDPOINT. We can’t prove the destination matches the brand the credential belongs to.

⚠️

Known vulnerabilities in dependencies: 5 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 1 credential: API_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAPI_EMAIL— "": "user@example.com",

configAPI_LOGIN_CREDENTIALS— Set to a JSON object string containing any extra fields you need. They are merged into the login POST body alongside email and password:

configAPI_LOGIN_ENDPOINT— "": "/auth/sign-in"

configAPI_OTP— "": "482019",

🔐 secretAPI_PASSWORD— "": "yourpassword",

configAPI_SWAGGER_URL— "": "https://api.example.com/docs-json"

configAPI_TOKEN_PATH— "": "data.access_token",

configAPI_VERIFY_CREDENTIALS— If your verify endpoint requires extra fields that aren't session identifiers or the OTP, add them here:

configAPI_VERIFY_ENDPOINT— "": "/auth/verify-otp",

configREST_BASE_URL— "": "https://api.example.com/api/v1",

configREST_ENABLE_SSL_VERIFY— "": "false",

configREST_RESPONSE_SIZE_LIMIT— Returns the raw OpenAPI JSON (truncated to if large).

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/muhammed-abdelghany-rest-api-mcp-eb7yip)](https://m8ven.ai/mcp/muhammed-abdelghany-rest-api-mcp-eb7yip)

commit: 3a949ca4d33f78f6fb6c36701cc86f71fd440305

code hash: 5d0bbf212e58b9e817858a458649d3b4fbe3f9b71d063e0554d5f2204a119ea1

verified: 4/18/2026, 6:13:28 PM

view raw JSON →