nab
io.github.MikkoParkkola/nab
About nab
nab is an MCP server published by the GitHub account MikkoParkkola. Token-optimized HTTP client for LLMs: fetches any URL as clean markdown. CLI and MCP server.
It runs on your own machine: your AI client starts it from the cargo package nab at version 0.12.6.
It asks for no keys or passwords.
Version 0.12.6 was published on 24 October 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 7 automated checks on registry metadata: 3 pass, 1 warn, 0 fail, 3 info. How we check.
What it asks for
| Variable | Required | Secret | Description |
|---|---|---|---|
NAB_SSRF_ALLOW_PRIVATE | No | No | Set to allow fetching private/internal IP addresses (corporate dashboards). Never unblocks loopback, link-local/cloud-metadata, or other always-denied ranges. Off by default. |
NAB_SSRF_ALLOWLIST | No | No | Comma-separated list of private IP/CIDR ranges to exempt from the SSRF guard (e.g. 10.252.0.0/16,192.168.1.5). Narrower, preferred alternative to NAB_SSRF_ALLOW_PRIVATE. Empty by default. |
NAB_WEBMCP_STRICT | No | No | Set to a truthy value to require fetched pages advertising a WebMCP manifest to match NAB_WEBMCP_OPT_IN before ingestion is allowed (defense against prompt injection via fetched content). Off by default. |
NAB_WEBMCP_OPT_IN | No | No | Comma-separated allowlist consulted when NAB_WEBMCP_STRICT is enabled. Empty by default. |
NAB_STATE_DIR | No | No | Overrides the directory used to persist session/cookie state (default: ~/.nab). |
NAB_KEYCHAIN_INTERACTION | No | No | Controls whether cookie extraction may prompt macOS Keychain for authorization. Set to 'never' in automated/headless callers so a background fetch cannot open a GUI dialog. |
NAB_OP_BIN | No | No | Path to the 1Password CLI binary used for credential retrieval during the login tool (default: op). |
NAB_MCP_CLI_BIN | No | No | Path to the mcp-cli binary used for MCP-based credential retrieval (default: mcp-cli). |
NAB_NO_TELEMETRY | No | No | Set to anything other than 0 or false to skip the daily heartbeat. NO_TELEMETRY and DO_NOT_TRACK do the same. |
NAB_TELEMETRY_ENDPOINT | No | No | Replace the daily heartbeat URL. An empty value leaves the default. |
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/MikkoParkkola/nab |
| Version pinned | Pass | Every package has an explicit version |
| Secrets requested | Info | Asks for no secrets |
| Known package registry | Warn | Unrecognized registry: cargo |
| Namespace ownership | Info | Name verified via GitHub account MikkoParkkola |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Code red flags | Info | cargo packages are not read yet |
Popularity & health: 68 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
0 forks, 296 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | io.github.MikkoParkkola/nab |
|---|---|
| Publisher | GitHub account MikkoParkkola |
| How the name is verified | Name verified via GitHub account MikkoParkkola. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | cargo nab 0.12.6 (stdio) |
| Version | 0.12.6 |
| Published | |
| Last updated | |
| Source repository | https://github.com/MikkoParkkola/nab |
| Website | https://github.com/MikkoParkkola/nab |
| Category | Files & documents (assigned by keyword rule, not by hand) |
Related servers in Files & documents
- URL to Markdown (Article Extractor)7/7Turn any URL into clean Markdown or text for LLMs, RAG and agents.…
- Intercept7/7Give your AI the ability to read the web. Fetches URLs as clean…
- web-fetcher7/7Turns any web page into clean Markdown, page metadata and…
- web2md4/4Convert any URL to clean Markdown. Free tier: 10/day. Unlimited via…
- Page2AI — Web to Markdown7/7Convert a web page URL to clean Markdown for LLM context. Local, no…
- NanoParse4/4Clean Markdown from any URL with Litmus trust signals. $0.005 per…