Middlebrick

Created By
middleBrick2 months ago
Scan APIs for security vulnerabilities and get OWASP risk scores. Detects auth bypass, BOLA/IDOR, data exposure, prompt injection, and 12+ security categories.
Overview

@middlebrick/mcp-server

MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.

Setup

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": ["-y", "@middlebrick/mcp-server"],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}

Get your API key at: middlebrick.com/dashboard

Tools

ToolDescription
scan_apiScan an API endpoint for security vulnerabilities
get_scanGet results of a previous scan
list_scansList previous scans

scan_api

ParameterTypeRequiredDescription
urlstringYesAPI endpoint URL
methodstringNoHTTP method (default: GET)

get_scan

ParameterTypeRequiredDescription
scanIdstringYesScan ID to retrieve

list_scans

ParameterTypeRequiredDescription
limitnumberNoMax results
offsetnumberNoSkip count
statusstringNoFilter: queued, processing, completed, failed

Environment Variables

VariableRequiredDescription
MIDDLEBRICK_API_KEYYesAPI key
MIDDLEBRICK_BASE_URLNoAPI URL override

License

Apache 2.0 — middleBrick

Server Config

{
  "mcpServers": {
    "middlebrick": {
      "command": "npx",
      "args": [
        "-y",
        "@middlebrick/mcp-server"
      ],
      "env": {
        "MIDDLEBRICK_API_KEY": "mb_your_key_here"
      }
    }
  }
}
Project Info
Created At
2 months ago
Updated At
2 months ago
Author Name
middleBrick
Star
-
Language
-
License
-
Category

Recommend Servers

View All
AI Work Market — USDC settlement rails for AI labor on Base Mainnet)
@Dario (DME)

AI Work Market is a USDC escrow protocol on Base Mainnet, designed for autonomous AI agents to find work, post jobs, and settle payments without humans in the loop. This MCP server exposes 10 tools: **Escrow lifecycle** - `create_intent_quote` — get calldata + gas estimate for funding a new escrow intent - `submit_proof_quote` — get calldata for the seller to submit a proof URI - `release_funds_quote` — get calldata for the buyer to release payment (or claim/refund) **x402 single-call binding** - `x402_consume` — replaces the 5-step x402 flow with one HMAC-signed POST that returns a delivery URL **Onboarding & discovery** - `agent_onboard` — generate a signed agent card with marketplace attestation - `agent_search` — tf-idf search over the live agent catalog - `agent_reputation` — server-side reputation from on-chain Released/Refunded/Disputed events **Live state** - `system_status` — live on-chain state (nextIntentId, accumulatedFees, contract balance, owner) - `escrow_rules` — contract semantics, lifecycle, call guides, failure modes - `events_subscribe` — SSE stream of new on-chain intent events All endpoints are serverless (Vercel) and return their schema on GET. No browser, no wallet UI required for an agent to integrate. The protocol takes a 1% commission on every settlement; the rest goes to the seller. The full AgentCard is at `/.well-known/agent-card.json` (A2A-compatible). The OpenAPI 3.0.3 spec is at `/.well-known/openapi.json` with `components.securitySchemes` (none, hmacX402). `robots.txt` allows GPTBot, ClaudeBot, anthropic-ai, PerplexityBot, Google-Extended, Applebot-Extended, CCBot, Amazonbot.

an hour ago
Tavily Mcp
@tavily-ai

JavaScript
a year ago
Payperbyte
@0rkz

21 minutes ago