nab

io.github.MikkoParkkola/nab

About nab

nab is an MCP server published by the GitHub account MikkoParkkola. Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.

It runs on your own machine: your AI client starts it from the cargo package nab at version 0.12.6.

It asks for no keys or passwords.

Version 0.12.6 was published on 24 October 2026, and the source code is public, so you can read it before installing.

Written from the registry entry. 7 automated checks on registry metadata: 3 pass, 1 warn, 0 fail, 3 info. How we check.

What it asks for

VariableRequiredSecretDescription
NAB_SSRF_ALLOW_PRIVATENoNoSet to allow fetching private/internal IP addresses (corporate dashboards). Never unblocks loopback, link-local/cloud-metadata, or other always-denied ranges. Off by default.
NAB_SSRF_ALLOWLISTNoNoComma-separated list of private IP/CIDR ranges to exempt from the SSRF guard (e.g. 10.252.0.0/16,192.168.1.5). Narrower, preferred alternative to NAB_SSRF_ALLOW_PRIVATE. Empty by default.
NAB_WEBMCP_STRICTNoNoSet to a truthy value to require fetched pages advertising a WebMCP manifest to match NAB_WEBMCP_OPT_IN before ingestion is allowed (defense against prompt injection via fetched content). Off by default.
NAB_WEBMCP_OPT_INNoNoComma-separated allowlist consulted when NAB_WEBMCP_STRICT is enabled. Empty by default.
NAB_STATE_DIRNoNoOverrides the directory used to persist session/cookie state (default: ~/.nab).
NAB_KEYCHAIN_INTERACTIONNoNoControls whether cookie extraction may prompt macOS Keychain for authorization. Set to 'never' in automated/headless callers so a background fetch cannot open a GUI dialog.
NAB_OP_BINNoNoPath to the 1Password CLI binary used for credential retrieval during the login tool (default: op).
NAB_MCP_CLI_BINNoNoPath to the mcp-cli binary used for MCP-based credential retrieval (default: mcp-cli).
NAB_NO_TELEMETRYNoNoSet to anything other than 0 or false to skip the daily heartbeat. NO_TELEMETRY and DO_NOT_TRACK do the same.
NAB_TELEMETRY_ENDPOINTNoNoReplace the daily heartbeat URL. An empty value leaves the default.

Checks

CheckResultDetail
Source repository linkedPasshttps://github.com/MikkoParkkola/nab
Version pinnedPassEvery package has an explicit version
Secrets requestedInfoAsks for no secrets
Known package registryWarnUnrecognized registry: cargo
Namespace ownershipInfoName verified via GitHub account MikkoParkkola
Registry text aimed at the AIPassDescription and settings contain no hidden characters or instructions to the AI
Code red flagsInfocargo packages are not read yet

Popularity & health: 68 / 100

Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.

Popularity12 / 40

19 GitHub stars, no download count, no Hacker News posts found. Best two of the three, each on a log scale.

Activity25 / 25

Last push 2026-10-26, last release 2026-10-24, 127 commits in 90 days.

Issue health15 / 15

61 closed of 61 issues.

Our checks16 / 20

1 warning, each costing a fifth.

0 forks, 296 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.

What people say

No Hacker News threads link to its source code.

Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.

Facts

Registry nameio.github.MikkoParkkola/nab
PublisherGitHub account MikkoParkkola
How the name is verifiedName verified via GitHub account MikkoParkkola. The registry ties the name prefix to that account or domain; it does not check the code.
TypeLocal: runs on your machine from a package
Packagescargo nab 0.12.6 (stdio)
Version0.12.6
Published
Last updated
Source repositoryhttps://github.com/MikkoParkkola/nab
Websitehttps://github.com/MikkoParkkola/nab
CategoryFiles & documents (assigned by keyword rule, not by hand)

Related servers in Files & documents