middleBrick | API-Security
Description
Scan any API for OWASP Top 10 vulnerabilities and get a security risk score. Covers authentication, authorization (BOLA/BFLA), injection, data exposure, rate limiting, GraphQL, and LLM security.
What our measurements say
middleBrick | API-Security is a remote MCP server published at middlebrick.com. It has been probed 7 times since 9/12/2026. It answered in 7 of them (100.0%), a near-uninterrupted record. Median response time is 418 ms, placing it among the faster endpoints. It offers a narrow, focused set of 3 tools. On the protocol side it still runs 2025-11-25 and has not moved to the newer spec.
Agent readability score
Can an LLM agent pick the right tool here — names, descriptions and parameter clarity are assessed.
Agent readability score
Strengths
- Tool names clearly indicate their purpose (scan_api, get_scan, list_scans).
- No tool overlap; distinct functionalities for scanning, retrieving, and listing scans.
Weaknesses
- Parameters like 'method' in scan_api lack allowed values (e.g., HTTP methods).
- Status parameter in list_scans lacks defined allowed values (e.g., 'completed', 'failed').
- No documentation on error handling or constraints (e.g., invalid scanId in get_scan).
scan_api— Parameter 'method' lacks allowed HTTP method examples.list_scans— Parameter 'status' does not specify valid status values.
Verdict
Event narrative
Risk: low
- 2026-09-12T17:24:09.166Z — Compliance score set to 100 in legacy era · High compliance indicates secure configuration, but missing smoke test data may require investigation
Advice
Schema compliance
tools/list structure, inputSchema validity, and a functional smoke test — the components of the 0-100 score.
- tools/list schema valid
- inputSchema is valid JSON Schema
- Smoke test failed · last run:
- Cold-start: cold 42ms → warm 41ms (penalty 1ms)
Tools
Tools the server advertised in the latest measurement — measured, not catalog-claimed.
scan_apiScan an API endpoint for security vulnerabilities and get a risk score
urlstringrequiredmethodstring
get_scanGet results of a previous middleBrick scan by its ID
scanIdstringrequired
list_scansList previous middleBrick API security scans
limitnumberoffsetnumberstatusstring
Availability history
Event log
Derived by comparing consecutive probes — changes in era, protocol version, build and reachability.
- Added to watch — era: Legacy
Get your badge
Add this badge to your README — it updates automatically as measurements change.
[](https://mcpmetrics.io/servers/middlebrick-api-security)<a href="https://mcpmetrics.io/servers/middlebrick-api-security"><img src="https://mcpmetrics.io/badge/middlebrick/api-security/era.svg" alt="mcpmetrics"></a>You are seeing the last 7 days. Sign up for the full history. Which check failed and why is in the dashboard.
Sign up free to seeSimilar MCP servers
The catalog entries whose name and description are closest to this one, found with the same index the search box uses.
- io.github.nexus-api-lab/nexus-mcpmcp.nexus-api-lab.com
Japanese LLM security — prompt injection detection (jpi-guard) + PII masking (PII Guard). Free.
- agent-security-gatewayagent-security-gateway.onrender.com
Japanese prompt injection detection and x402 pre-payment security check API. Deterministic validator included. No AI used for core validation.
- Bright Securityapp.brightsec.com
AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.
- SkillsSafe Security Scannermcp.skillssafe.com
AI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.
- Security Intel MCPsecurity.datakoot.com
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
- ResolutionRelay API Searchapi.mayneart.uk
Search millions of x402 APIs for data, finance, validation, security, inventory, sync and automation
Comments
Sign in to write a comment
No comments yet. Be the first.