MCP.so
Sign In

Middlebrick

@middleBrick

Repository

About Middlebrick

Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.

#api-security#owasp#vulnerability-scanner#security#llm-security#prompt-injection#api-testing#devsecops#ci-cd#compliance#pentest

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": [
        "-y",
        "@middlebrick/mcp-server"
      ],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Tools

3

Scan an API endpoint for security vulnerabilities and get a risk score

Get results of a previous middleBrick scan by its ID

List previous middleBrick API security scans

Overview

What is Middlebrick?

Middlebrick is an MCP server that integrates with middleBrick API security scanning. It lets AI assistants like Claude and Cursor scan APIs for vulnerabilities via tool calls.

How to use Middlebrick?

Install by configuring the MCP client with the command npx -y @middlebrick/mcp-server and setting the MIDDLEBRICK_API_KEY environment variable. Invoke the tools scan_api, get_scan, and list_scans from the AI assistant.

Key features of Middlebrick

  • Scan an API endpoint for security vulnerabilities
  • Retrieve results of a previous scan
  • List all previous scans with filtering
  • Configure via environment variables
  • Works with Claude Desktop and Cursor

Use cases of Middlebrick

  • AI-assisted security auditing of API endpoints
  • Automated vulnerability scanning during development
  • Retrieving and reviewing past scan results in chat

FAQ from Middlebrick

How do I get a Middlebrick API key?

Get your API key at middlebrick.com/dashboard.

What tools does Middlebrick provide?

Three tools: scan_api (scan an endpoint), get_scan (get a scan’s results), and list_scans (list previous scans).

What parameters does scan_api require?

The url parameter (string) is required; method (string, default GET) is optional.

Can I override the API base URL?

Yes, set the MIDDLEBRICK_BASE_URL environment variable (optional).

What scan statuses can I filter with list_scans?

You can filter by queued, processing, completed, or failed.

Frequently asked questions

How do I get a Middlebrick API key?

Get your API key at [middlebrick.com/dashboard](https://middlebrick.com/dashboard).

What tools does Middlebrick provide?

Three tools: `scan_api` (scan an endpoint), `get_scan` (get a scan’s results), and `list_scans` (list previous scans).

What parameters does `scan_api` require?

The `url` parameter (string) is required; `method` (string, default GET) is optional.

Can I override the API base URL?

Yes, set the `MIDDLEBRICK_BASE_URL` environment variable (optional).

What scan statuses can I filter with `list_scans`?

You can filter by `queued`, `processing`, `completed`, or `failed`.

Comments

Basic information

Category

Developer Tools

Transports

stdio

Author

middleBrick

Submitted by

Isaac [{v}p]

More Developer Tools MCP servers

TranscriptFetch MCP Server

TranscriptFetch

Model Context Protocol (MCP) server for TranscriptFetch: fetch YouTube transcripts, search, channels, and playlists from any MCP client.

extentos

Asger mølgaard

Extentos is a multi-vendor development platform for adding smart-glasses capabilities to existing iOS and Android apps. The simplest analogy is Stripe for smart glasses:

Agent Conductor

icohangar-ops

Agent conductor — AGENTS.md contract parser, SKILL.md registry, CHP decision engine over MCP

discoverGPT

Joe Monastiero

discoverGPT is visualAI's unified MCP gateway for AI commerce, exposing 29 tools across four capabilities on one canonical product catalog: trimodal search (natural-language, precise-color, and image-similarity), AI cata

Repo Test Architect

RepoAssay

Local-first, read-only MCP server for evidence-backed repository test architecture audits and test planning.