http-server

http-server is a simple static HTTP server for serving files from a local directory (and optionally directory listings). It is typically used as a lightweight way to host a folder for development, testing, or quick demos.

Evaluated Apr 04, 2026 (24d ago)
Homepage ↗ Repo ↗ DevTools devtools infrastructure static-web-server nodejs
⚙ Agent Friendliness
34
/ 100
Can an agent use this?
🔒 Security
26
/ 100
Is it safe for agents?
⚡ Reliability
28
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
0
Documentation
0
Error Messages
0
Auth Simplicity
100
Rate Limits
0

🔒 Security

TLS Enforcement
10
Auth Strength
0
Scope Granularity
0
Dep. Hygiene
50
Secret Handling
80

Generally serves local static content without authentication. TLS enforcement is not inherent (depends on how/where it is run). Primary risk is accidental exposure of files if listening on non-local interfaces.

⚡ Reliability

Uptime/SLA
0
Version Stability
50
Breaking Changes
40
Error Recovery
20
AF Security Reliability

Best When

You need a quick local static server with minimal setup to browse files in a browser.

Avoid When

You need strong security guarantees, fine-grained access control, or production-grade reliability/monitoring.

Use Cases

  • Serve static web files (HTML/CSS/JS) locally
  • Quickly test a frontend build in a browser
  • Host documentation/demo assets without a full web framework
  • Local file sharing for development networks

Not For

  • Production-grade web hosting with robust security controls
  • High-traffic workloads requiring performance guarantees
  • APIs requiring authentication/authorization, routing, or complex middleware
  • Use cases needing strict HTTP semantics, caching control, and observability

Interface

REST API
No
GraphQL
No
gRPC
No
MCP Server
No
SDK
No
Webhooks
No

Authentication

OAuth: No Scopes: No

As a simple static server, it typically does not provide built-in authentication mechanisms for protecting content.

Pricing

Free tier: No
Requires CC: No

Open-source/utility-style package; no hosted pricing model indicated.

Agent Metadata

Pagination
none
Idempotent
False
Retry Guidance
Not documented

Known Gotchas

  • Designed for serving static files; there is no structured API surface for an agent to call beyond HTTP GET for files.
  • Operational use depends heavily on CLI flags (port, root directory, caching headers, directory listing), which may not be consistently machine-deducible without reading docs.
  • If bound to a public interface, it can unintentionally expose local content; safest usage is localhost-only during development.

Alternatives

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for http-server.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

$3

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

Scores are editorial opinions as of 2026-04-04.

8642
Packages Evaluated
17761
Need Evaluation
586
Need Re-evaluation
Community Powered