{
  "markdown": "# rqwstr\n\nAI-native HTTP security testing toolkit, shipped as an MCP server. It gives an AI agent low-level control over HTTP/1.1 and HTTP/2 — raw framing, connection pinning, intruder-style fuzzing, request racing, OOB detection, and multi-step chains — on its own Go engine, rather than wrapping a high-level HTTP client.\n\nThis repository hosts the **release binaries and Claude Desktop `.mcpb` bundles**. The source is proprietary. Docs and sign-up: **[rqwstr.com](https://rqwstr.com)**.\n\n![rqwstr localhost MCP demo](demo/rqwstr-demo.gif)\n\nReal v1.2.0 MCP session against a synthetic loopback fixture: one request, response-side\nfiltering, stored search, and named retrieval. The capture and renderer are reproducible\nfrom [`demo/`](demo/README.md) with an activated free or Pro license; no live target is\ninvolved.\n\n## Install\n\n### Claude Desktop (one-click)\n\nDownload the `.mcpb` for your platform from the [latest release](https://github.com/Kjopstad-IT/rqwstr-mcp/releases/latest) and double-click it to add rqwstr as a Claude Desktop extension.\n\n- **macOS** — Apple silicon (`darwin_arm64`) or Intel (`darwin_amd64`)\n- **Linux** — `linux_amd64` or `linux_arm64`\n- **Windows** — `windows_amd64`\n\n### Standalone MCP server\n\nDownload the binary for your platform from the [latest release](https://github.com/Kjopstad-IT/rqwstr-mcp/releases/latest), then point your MCP client at it:\n\n```json\n{\n  \"mcpServers\": {\n    \"rqwstr\": {\n      \"command\": \"rqwstr\",\n      \"args\": [\"serve\"]\n    }\n  }\n}\n```\n\n`rqwstr serve` runs the MCP server on stdio.\n\n## Tools\n\n17 HTTP tools:\n\n`send` · `send_h2` · `fetch` · `intruder` · `race` · `chain` · `oob` · `parallel` ·\n`scope` · `session` · `encode` · `export` · `save` · `search` · `hunt` · `profile` ·\n`import`\n\n## Workflows\n\nThe HTTP tools cover:\n\n- **Traffic** — `send` (HTTP/1.1), `send_h2` (HTTP/2), `fetch`, `import` (Burp / HAR), `export` (curl / python / requests)\n- **Hunt lifecycle** — `hunt`, `scope`, `save`, `search`, `session`, `profile`\n- **Attacks** — `intruder` (sniper, battering ram, pitchfork, cluster bomb), `race` (single-packet), `chain`, `parallel`\n- **OOB** — `oob` with Interactsh integration\n- **Encoding** — `encode` (URL, base64, JWT, and more)\n\nAgents discover workflows through the `rqwstr_docs` tool. Per-hunt state lives in SQLite. The free tier is the core toolset; a Pro tier unlocks the heavier offensive tools.\n\n## Verify a download\n\nEach release includes `checksums.txt`. Verify before running:\n\n```sh\n# Linux\nsha256sum -c checksums.txt\n\n# macOS\nshasum -a 256 -c checksums.txt\n```\n\n## Privacy Policy\n\nrqwstr's data collection, usage, storage, sharing, retention, and contact practices are\ndocumented in the [Privacy Policy](https://rqwstr.com/legal/privacy/).\n\n## License\n\nProprietary. © Kjøpstad IT. See [rqwstr.com](https://rqwstr.com) for terms.\n",
  "bytes": 2827,
  "sha": "c716c241fd7042c2665e6f5d6b2afbbd7e6f5622cacb13c54aabf33b5ea62a71",
  "repo_slug": "kjopstad-it/rqwstr-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_kjopstad_it_rqwstr_56ddfb04/readme"
}