Middlebrick MCP Server

@middleBrick

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

middleBrick

提交者

Isaac [{v}p]

关于 Middlebrick MCP Server

Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.

#api-security#owasp #vulnerability-scanner #security #llm-security #prompt-injection #api-testing #devsecops #ci-cd #compliance #pentest

Middlebrick MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": [
        "-y",
        "@middlebrick/mcp-server"
      ],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Middlebrick MCP Server 工具

Scan an API endpoint for security vulnerabilities and get a risk score

Get results of a previous middleBrick scan by its ID

List previous middleBrick API security scans

概览

What is Middlebrick?

Middlebrick is an MCP server that integrates with middleBrick API security scanning. It lets AI assistants like Claude and Cursor scan APIs for vulnerabilities via tool calls.

How to use Middlebrick?

Install by configuring the MCP client with the command npx -y @middlebrick/mcp-server and setting the MIDDLEBRICK_API_KEY environment variable. Invoke the tools scan_api, get_scan, and list_scans from the AI assistant.

Key features of Middlebrick

Scan an API endpoint for security vulnerabilities
Retrieve results of a previous scan
List all previous scans with filtering
Configure via environment variables
Works with Claude Desktop and Cursor

Use cases of Middlebrick

AI-assisted security auditing of API endpoints
Automated vulnerability scanning during development
Retrieving and reviewing past scan results in chat

常见问题

How do I get a Middlebrick API key?

Get your API key at [middlebrick.com/dashboard](https://middlebrick.com/dashboard).

What tools does Middlebrick provide?

Three tools: `scan_api` (scan an endpoint), `get_scan` (get a scan’s results), and `list_scans` (list previous scans).

What parameters does `scan_api` require?

The `url` parameter (string) is required; `method` (string, default GET) is optional.

Can I override the API base URL?

Yes, set the `MIDDLEBRICK_BASE_URL` environment variable (optional).

What scan statuses can I filter with `list_scans`?

You can filter by `queued`, `processing`, `completed`, or `failed`.

开发工具分类下的更多 MCP 服务器

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

TaskerArmy Agent

TaskerArmy

Ask Claude or ChatGPT what Shopify theme optimization tasks are pending on your store, a remote MCP server for TaskerArmy Agent accounts.

offprompt

MCP server that lets Claude Code, Cursor or Codex ask you for API keys on a local page and write them to .env. The agent only ever sees key names.

AptiBuild AI — Career Intelligence

ParklandBuilds

AptiBuild AI — Career Intelligence MCP Server Structured career decision scaffolding for AI agents. Provides personality-conditioned business idea generation, official BLS OEWS wage data, FRED labor market signals, and

ArtiBot Cloud MCP - Zhijiangyun 智匠云

bofob

ArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation