Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"io-github-middlebrick-mcp-server": {
"command": "<see-readme>",
"args": []
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.
No automated test available for this server. Check the GitHub README for setup instructions.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security
An evil MCP server used for redteam testing
Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
mcpki-server is the backend infrastructure for https://www.mcpki.org, enabling secure public key management and autonomous certificate handling for large language models (LLMs).
MCP Security Weekly
Get CVE alerts and security updates for io.github.middleBrick/mcp-server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}
Add to .cursor/mcp.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}
Get your API key at: middlebrick.com/dashboard
| Tool | Description |
|---|---|
scan_api | Scan an API endpoint for security vulnerabilities |
get_scan | Get results of a previous scan |
list_scans | List previous scans |
| Parameter | Type | Required | Description |
|---|---|---|---|
url | string | Yes | API endpoint URL |
method | string | No | HTTP method (default: GET) |
| Parameter | Type | Required | Description |
|---|---|---|---|
scanId | string | Yes | Scan ID to retrieve |
| Parameter | Type | Required | Description |
|---|---|---|---|
limit | number | No | Max results |
offset | number | No | Skip count |
status | string | No | Filter: queued, processing, completed, failed |
| Variable | Required | Description |
|---|---|---|
MIDDLEBRICK_API_KEY | Yes | API key |
MIDDLEBRICK_BASE_URL | No | API URL override |
Apache 2.0 — middleBrick