Middlebrick
About
Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.
Details
- Author
- middleBrick
- Downloads
- 316
- Categories
- Cloud Service, API, Security, Developer Tools
Jump to
- Scan an API endpoint for security vulnerabilities
- Retrieve results of a previous scan
- List all previous scans with filtering
- Configure via environment variables
- Works with Claude Desktop and Cursor
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
MiddlebrickCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install by configuring the MCP client with the command npx -y @middlebrick/mcp-server and setting the MIDDLEBRICK_API_KEY environment variable. Invoke the tools scan_api, get_scan, and list_scans from the AI assistant.
scan_api
Scan an API endpoint for security vulnerabilities and get a risk score
get_scan
Get results of a previous middleBrick scan by its ID
list_scans
List previous middleBrick API security scans
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"middlebrick": {
"middlebrick": {
"command": "npx",
"args": [
"-y",
"@middlebrick/mcp-server"
],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}
}McpServers
{
"middlebrick": {
"command": "npx",
"args": [
"-y",
"@middlebrick/mcp-server"
],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}@middlebrick/mcp-server
MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.
Setup
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}
Cursor
Add to .cursor/mcp.json:
{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": ["-y", "@middlebrick/mcp-server"],
"env": {
"MIDDLEBRICK_API_KEY": "mb_your_key_here"
}
}
}
}
Get your API key at: middlebrick.com/dashboard
Tools
| Tool | Description |
|------|-------------|
| scan_api | Scan an API endpoint for security vulnerabilities |
| get_scan | Get results of a previous scan |
| list_scans | List previous scans |
scan_api
| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| url | string | Yes | API endpoint URL |
| method | string | No | HTTP method (default: GET) |
get_scan
| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| scanId | string | Yes | Scan ID to retrieve |
list_scans
| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| limit | number | No | Max results |
| offset | number | No | Skip count |
| status | string | No | Filter: queued, processing, completed, failed |
Environment Variables
| Variable | Required | Description |
|----------|----------|-------------|
| MIDDLEBRICK_API_KEY | Yes | API key |
| MIDDLEBRICK_BASE_URL | No | API URL override |
License
Apache 2.0 — middleBrick
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
