English Français العربية

io.github.middleBrick/mcp-server

Official registry Security

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @middlebrick/mcp-server
Claude Code 
claude mcp add io-github-middlebrick-mcp-server -e 'MIDDLEBRICK_API_KEY=<your middlebrick_api_key>' -- npx -y @middlebrick/mcp-server@0.1.2
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "io-github-middlebrick-mcp-server": {
            "command": "npx",
            "args": [
                "-y",
                "@middlebrick/mcp-server@0.1.2"
            ],
            "env": {
                "MIDDLEBRICK_API_KEY": "<your middlebrick_api_key>"
            }
        }
    }
}

Environment variables

  • MIDDLEBRICK_API_KEY required secret Your middleBrick API key (get one at middlebrick.com)

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. @middlebrick/mcp-server
  2. Setup
  3. Tools
  4. Environment Variables
  5. License

@middlebrick/mcp-server

MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.

Setup

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}
Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Get your API key at: middlebrick.com/dashboard

Tools

ToolDescription
scan_apiScan an API endpoint for security vulnerabilities
get_scanGet results of a previous scan
list_scansList previous scans
scan_api
ParameterTypeRequiredDescription
urlstringYesAPI endpoint URL
methodstringNoHTTP method (default: GET)
get_scan
ParameterTypeRequiredDescription
scanIdstringYesScan ID to retrieve
list_scans
ParameterTypeRequiredDescription
limitnumberNoMax results
offsetnumberNoSkip count
statusstringNoFilter: queued, processing, completed, failed

Environment Variables

VariableRequiredDescription
MIDDLEBRICK_API_KEYYesAPI key
MIDDLEBRICK_BASE_URLNoAPI URL override

License

Apache 2.0 — middleBrick

Frequently asked questions

What is io.github.middleBrick/mcp-server?

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

How do I install io.github.middleBrick/mcp-server?

It runs on your machine. In Claude Code: claude mcp add io-github-middlebrick-mcp-server -e 'MIDDLEBRICK_API_KEY=<your middlebrick_api_key>' -- npx -y @middlebrick/mcp-server@0.1.2. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.middleBrick/mcp-server need an API key?

Yes. It expects MIDDLEBRICK_API_KEY, which you set in its configuration.

Is io.github.middleBrick/mcp-server open source?

Yes. Its code is on GitHub under the Apache-2.0 license.

Who maintains io.github.middleBrick/mcp-server?

It is published by middleBrick. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.