loading…
Search for a command to run...
loading…
Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.
Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.
MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}
Add to .cursor/mcp.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}
Get your API key at: middlebrick.com/dashboard
| Tool | Description |
|---|---|
scan_api |
Scan an API endpoint for security vulnerabilities |
get_scan |
Get results of a previous scan |
list_scans |
List previous scans |
| Parameter | Type | Required | Description |
|---|---|---|---|
url |
string | Yes | API endpoint URL |
method |
string | No | HTTP method (default: GET) |
| Parameter | Type | Required | Description |
|---|---|---|---|
scanId |
string | Yes | Scan ID to retrieve |
| Parameter | Type | Required | Description |
|---|---|---|---|
limit |
number | No | Max results |
offset |
number | No | Skip count |
status |
string | No | Filter: queued, processing, completed, failed |
| Variable | Required | Description |
|---|---|---|
MIDDLEBRICK_API_KEY |
Yes | API key |
MIDDLEBRICK_BASE_URL |
No | API URL override |
Apache 2.0 — middleBrick
Добавь это в claude_desktop_config.json и перезапусти Claude Desktop.
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": []
}
}
}PRs, issues, code search, CI status
Database, auth and storage
Reference / test server with prompts, resources, and tools.
Secure file operations with configurable access controls.