
Mcp Server
Connects Claude or Cursor to middleBrick's API security scanner through three tools: scan_api to check endpoints for vulnerabilities, get_scan to retrieve results, and list_scans to browse scan history. You pass in a URL and optional HTTP method, and it runs checks against OWASP Top 10, LLM-specific risks, and GraphQL vulnerabilities. Requires a middleBrick API key from their dashboard. Useful when you're reviewing API security during development or want to catch common vulnerabilities without leaving your editor. Scans run asynchronously, so you initiate one and poll for results.
- tools
- 3
- auth
- Secret needed
- transport
- STDIO
- env var
- 1
- last updated
- Apr 3, 2026
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
scan_apiScan an API endpoint for security vulnerabilities
Scan an API endpoint for security vulnerabilities
No parameter schema in public metadata yet.
get_scanGet results of a previous scan
Get results of a previous scan
No parameter schema in public metadata yet.
list_scansList previous scans
List previous scans
No parameter schema in public metadata yet.
Sponsors
Configuration
MIDDLEBRICK_API_KEY*secretYour middleBrick API key (get one at middlebrick.com)
Readme
@middlebrick/mcp-server
MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.
Setup
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}
Cursor
Add to .cursor/mcp.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}
Get your API key at: middlebrick.com/dashboard
Tools
| Tool | Description |
|---|---|
scan_api | Scan an API endpoint for security vulnerabilities |
get_scan | Get results of a previous scan |
list_scans | List previous scans |
scan_api
Details
- Repository
- github.com/middlebrick/mcp-server
- Categories
- AI & LLM Tools, Security & Pentesting
- Package
@middlebrick/mcp-server- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active