middlebrick avatar

Mcp Server

middlebrick/mcp-server

Connects Claude or Cursor to middleBrick's API security scanner through three tools: scan_api to check endpoints for vulnerabilities, get_scan to retrieve results, and list_scans to browse scan history. You pass in a URL and optional HTTP method, and it runs checks against OWASP Top 10, LLM-specific risks, and GraphQL vulnerabilities. Requires a middleBrick API key from their dashboard. Useful when you're reviewing API security during development or want to catch common vulnerabilities without leaving your editor. Scans run asynchronously, so you initiate one and poll for results.

tools
3
auth
Secret needed
transport
STDIO
env var
1
last updated
Apr 3, 2026

Tools

3 tools

Public tool metadata for what this MCP can expose to an agent.

scan_apiScan an API endpoint for security vulnerabilities

Scan an API endpoint for security vulnerabilities

No parameter schema in public metadata yet.

get_scanGet results of a previous scan

Get results of a previous scan

No parameter schema in public metadata yet.

list_scansList previous scans

List previous scans

No parameter schema in public metadata yet.

Sponsors

Configuration

MIDDLEBRICK_API_KEY*secret

Your middleBrick API key (get one at middlebrick.com)

Readme

@middlebrick/mcp-server

MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.

Setup

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Get your API key at: middlebrick.com/dashboard

Tools

ToolDescription
scan_apiScan an API endpoint for security vulnerabilities
get_scanGet results of a previous scan
list_scansList previous scans

scan_api


View the full README on GitHub

Details

Repository
github.com/middlebrick/mcp-server
Categories
AI & LLM Tools, Security & Pentesting
Package
@middlebrick/mcp-server
Transport
STDIO
Auth
Required
Registry
MCP registry, active

Related AI & LLM Tools MCP servers

View all
1mifactory-bot avatarMifactory Logic Verifiermifactory-bot/mifactory-logic-verifierVerify AI agent reasoning and logic for errors and contradictions. Pay-per-use.0stars
2mifactory-bot avatarMifactory Spec Apimifactory-bot/mifactory-spec-apiConvert docs to agent-readable specs with criteria and constraints. $0.10/convert.0stars
3mobileappbyharis avatarNavi X402 Mcpmobileappbyharis/navi-x402-mcpPaid agent tools, zero API keys: crypto, weather, translation, web intel, x402 discovery (USDC/Base)0stars
4mosslandopendevs avatarAlpha (Mossland)mosslandopendevs/alpha-mcpKorean crypto × AI media MCP — channel stance, daily briefs, RAG, canonical store, AI personas.0stars
5motecloud avatarMotecloud Memorymotecloud/motecloud-mcp-serverCloud-hosted MCP server for durable AI memory0stars
6mishaal-cloud avatarAscend GTM Gatewaymishaal-cloud/ascend-gtm-ops34-tool GTM gateway: CRMs, ad platforms, analytics, Google Workspace, AWS, and LLM orchestration.0stars