MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}Add to .cursor/mcp.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}Get your API key at: middlebrick.com/dashboard
Related MCP server: contrastapi
Tool | Description |
| Scan an API endpoint for security vulnerabilities |
| Get results of a previous scan |
| List previous scans |
Parameter | Type | Required | Description |
| string | Yes | API endpoint URL |
| string | No | HTTP method (default: GET) |
Parameter | Type | Required | Description |
| string | Yes | Scan ID to retrieve |
Parameter | Type | Required | Description |
| number | No | Max results |
| number | No | Skip count |
| string | No | Filter: queued, processing, completed, failed |
Variable | Required | Description |
| Yes | API key |
| No | API URL override |
Apache 2.0 — middleBrick
This server cannot be deployed
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
