Middlebrick

Created By

middleBricka month ago

Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.

# api-security

# owasp

Overview Content Tools Comments

Overview

@middlebrick/mcp-server

MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.

Setup

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Get your API key at: middlebrick.com/dashboard

Tools

Tool	Description
`scan_api`	Scan an API endpoint for security vulnerabilities
`get_scan`	Get results of a previous scan
`list_scans`	List previous scans

scan_api

Parameter	Type	Required	Description
`url`	string	Yes	API endpoint URL
`method`	string	No	HTTP method (default: GET)

get_scan

Parameter	Type	Required	Description
`scanId`	string	Yes	Scan ID to retrieve

list_scans

Parameter	Type	Required	Description
`limit`	number	No	Max results
`offset`	number	No	Skip count
`status`	string	No	Filter: queued, processing, completed, failed

Environment Variables

Variable	Required	Description
`MIDDLEBRICK_API_KEY`	Yes	API key
`MIDDLEBRICK_BASE_URL`	No	API URL override

License

Apache 2.0 — middleBrick

Server Config

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": [
        "-y",
        "@middlebrick/mcp-server"
      ],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Recommend Servers

TraeBuild with Free GPT-4.1 & Claude 3.7. Fully MCP-Ready.

Howtocook Mcp基于Anduin2017 / HowToCook （程序员在家做饭指南）的mcp server，帮你推荐菜谱、规划膳食，解决“今天吃什么“的世纪难题； Based on Anduin2017/HowToCook (Programmer's Guide to Cooking at Home), MCP Server helps you recommend recipes, plan meals, and solve the century old problem of "what to eat today"

WindsurfThe new purpose-built IDE to harness magic

CursorThe AI Code Editor

Serper MCP ServerA Serper MCP Server

DeepChatYour AI Partner on Desktop

Jina AI MCP ToolsA Model Context Protocol (MCP) server that integrates with Jina AI Search Foundation APIs.

EdgeOne Pages MCPAn MCP service designed for deploying HTML content to EdgeOne Pages and obtaining an accessible public URL.

MCP AdvisorMCP Advisor & Installation - Use the right MCP server for your needs

Amap Maps高德地图官方 MCP Server

RedisA Model Context Protocol server that provides access to Redis databases. This server enables LLMs to interact with Redis key-value stores through a set of standardized tools.