Add authentication header support to GET, PUT, PATCH, DELETE API tools

[Copilot]

Only POST requests supported authentication headers, causing 403 errors when making authenticated PUT/PATCH/DELETE/GET requests.

Changes

• Tool schemas (src/tools.ts): Added optional token and headers parameters to GET, PUT, PATCH, DELETE tools
• Implementation (src/tools/api/requests.ts):
  • Added parseJsonSafely() helper to handle JSON parsing with fallback
  • Updated all HTTP methods to accept and forward authentication headers
  • Headers merge with defaults (Content-Type: application/json), custom headers override
• Tests (src/__tests__/tools/api/requests.test.ts): Added coverage for Bearer tokens, Basic auth, and custom headers across all methods

Usage

Bearer token:

{
  url: "https://api.example.com/resource/1",
  value: '{"name": "updated"}',
  token: "your-bearer-token"
}

Basic auth or custom headers:

{
  url: "https://restful-booker.herokuapp.com/booking/4",
  value: '{"firstname": "Jane", "lastname": "Smith", ...}',
  headers: {
    "Authorization": "Basic YWRtaW46cGFzc3dvcmQxMjM="
  }
}

Both parameters are optional; existing code without authentication continues to work unchanged.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• restful-booker.herokuapp.com
  • Triggering command: /usr/local/bin/node node /tmp/test-real-api.mjs (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>API Authentication is not working while performing API testing using MCP Server.</issue_title>
<issue_description>Steps to Reproduce -
1- Provide prompt to perform Update API Call (More details are in this link - https://restful-booker.herokuapp.com/apidoc/index.html#api-Booking-UpdateBooking )
2 - Provide Authorization details as header as given in above link - using key as "Authorization" and it's values "Basic YWRtaW46cGFzc3dvcmQxMjM="
3- Send the Prompt in Copilot or Claude or any other AI Assistant.

Issue - In Postman Authentication is successful and it is giving response but when we are using MCP Server it is not able to Authenticate API call. , I have tried same with other website API calls also.

Adding Claude response -

The PUT request returned a 403 Forbidden status, which indicates that the request lacks proper authorization. The curl command you provided includes an Authorization header with Basic authentication (Authorization: Basic YWRtaW46cGFzc3dvcmQxMjM=), but the Playwright EA PUT function doesn't currently support custom headers including authorization.
The playwright_put function I used only accepts URL and body data, but doesn't have parameters for custom headers like the Authorization header that's needed for this API endpoint.

Please let me know if you need any other information.

==================================

and @executeautomation and other contributors, Thank you for all your efforts in creating this MCP Server.

</issue_description>

<agent_instructions>Can you analyse the full code and see why the API tool of Playwright is not handling authentication, I feel like its either not built as we had very basic implementations earlier, check and do the test before creating PR</agent_instructions>

Comments on the Issue (you are @copilot in this section)

@executeautomation That seems to be a legit issue, I will work on it and have it fixed, thanks for reporting @Wish-Infinite @roja-erukulla

• Fixes API Authentication is not working while performing API testing using MCP Server. #164

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.