Official description7 sourcesMCP servers8d ago

Kjopstad-IT/rqwstr

HTTP security testing toolkit (

View on GitHub ↗Direct link · no redirect page

Config template (adjust for your client)

claude mcp add rqwstr-mcp -- npx -y rqwstr-mcp

A pasteable skeleton generated from the repository name. Check the project README for the exact package and arguments.

Star count: 0 ★ · Kjopstad-IT/rqwstr-mcp · read from the GitHub search API · (checked 2026-10-16 20:00:20)
Source: collected from the punkpeye/awesome-mcp-servers list · type: MCP server
Harvest history: first seen 2026-10-09 · last seen 2026-10-16 · seen 32× · listed by 7 sources
Score: score 703 · 7 sources · mcp

FAQ (answers come from our records)

How do I install it?

We did not find an install command for this repository (our install coverage is only about 4%). Check its README or releases page.

Who is it for?

We filed it under these tags: MCP 服务. The tags come from the entry itself, not a taxonomy we imposed.

Who maintains it?

repository Kjopstad-IT/rqwstr-mcp；first catalogued 2026-10-09；last seen 2026-10-16。There is no official certification or quality rating here — we record sources and dates only.

Third-party quality signals

rqwstr

以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →

AI-native HTTP security testing toolkit, shipped as an MCP server. It gives an AI agent low-level control over HTTP/1.1 and HTTP/2 — raw framing, connection pinning, intruder-style fuzzing, request racing, OOB detection, and multi-step chains — on its own Go engine, rather than wrapping a high-level HTTP client.
This repository hosts the **release binaries and Claude Desktop .mcpb bundles**. The source is proprietary. Docs and sign-up: **rqwstr.com**.
Real v1.2.0 MCP session against a synthetic loopback fixture: one request, response-side
filtering, stored search, and named retrieval. The capture and renderer are reproducible
from demo/ with an activated free or Pro license; no live target is
involved.
Install
Claude Desktop (one-click)
Download the .mcpb for your platform from the latest release and double-click it to add rqwstr as a Claude Desktop extension.
- **macOS** — Apple silicon (darwin_arm64) or Intel (darwin_amd64)
- **Linux** — linux_amd64 or linux_arm64
- **Windows** — windows_amd64
Standalone MCP server
Download the binary for your platform from the latest release, then point your MCP client at it:
rqwstr serve runs the MCP server on stdio.
Tools
17 HTTP tools:
send · send_h2 · fetch · intruder · race · chain · oob · parallel ·
scope · session · encode · export · save · search · hunt · profile ·
import
Workflows
The HTTP tools cover:
- **Traffic** — send (HTTP/1.1), send_h2 (HTTP/2), fetch, import (Burp / HAR), export (curl / python / requests)
- **Hunt lifecycle** — hunt, scope, save, search, session, profile
- **Attacks** — intruder (sniper, battering ram, pitchfork, cluster bomb), race (single-packet), chain, parallel
- **OOB** — oob with Interactsh integration
- **Encoding** — encode (URL, base64, JWT, and more)
Agents discover workflows through the rqwstr_docs tool. Per-hunt state lives in SQLite. The free tier is the core toolset; a Pro tier unlocks the heavier offensive tools.
Verify a download
Each release includes checksums.txt. Verify before running: