Skip to main content
Glama
middleBrick

middleBrick

by middleBrick
OverviewSchemaRelated ServersScoreDiscussions
TypeScript
Remote

@middlebrick/mcp-server

MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.

Setup

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Get your API key at: middlebrick.com/dashboard

Related MCP server: contrastapi

Tools

Tool

Description

scan_api

Scan an API endpoint for security vulnerabilities

get_scan

Get results of a previous scan

list_scans

List previous scans

scan_api

Parameter

Type

Required

Description

url

string

Yes

API endpoint URL

method

string

No

HTTP method (default: GET)

get_scan

Parameter

Type

Required

Description

scanId

string

Yes

Scan ID to retrieve

list_scans

Parameter

Type

Required

Description

limit

number

No

Max results

offset

number

No

Skip count

status

string

No

Filter: queued, processing, completed, failed

Environment Variables

Variable

Required

Description

MIDDLEBRICK_API_KEY

Yes

API key

MIDDLEBRICK_BASE_URL

No

API URL override

License

Apache 2.0 — middleBrick

This server cannot be installed

A
license - permissive license
-
quality - not tested
D
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • Security Scanner MCP

    ongjin
    A
    license
    -
    quality
    B
    maintenance
    Automatically detects security vulnerabilities in AI-generated code, scanning for hardcoded secrets, injection flaws, XSS, weak cryptography, authentication issues, path traversal, and vulnerable dependencies across JavaScript, Python, Java, and Go.
    Last updated
    55
    2
    MIT

  • contrastapi

    UPinar
    A
    license
    A
    quality
    A
    maintenance
    Security intelligence API for AI models. CVE lookup with EPSS/KEV, domain recon (DNS, WHOIS, SSL, subdomains, WAF), and code security checks (secrets, injection, headers). 16 tools, no API key required.
    Last updated
    55
    32
    MIT
  • Sekrd Security Scanner by sekrdcom

    Sekrd Security Scannerofficial

    sekrdcom
    F
    license
    A
    quality
    C
    maintenance
    Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
    Last updated
    3

View all related MCP servers

Related MCP Connectors

  • LaunchTrust

    Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

  • Frogeye Security Scanner

    Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

  • aribot

    Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/middleBrick/mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server