josenieto/mcp-api-pentest

MCP server for autonomous API logic penetration testing. AI-driven detection of OWASP API Top 10 vulnerabilities (BOLA/IDOR) via multi-session authorization comparison. Supports Bearer, Basic, API Key, Cookie auth. Generates Markdown security audit reports with evidence.

1Stars on the repository
1Mods indexed here, across every type
24d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

mcp-api-pentest

01

josenieto/mcp-api-pentest

MCP server Claude CodeCodexCursor +2

MCP server for autonomous API logic penetration testing — OWASP API Top 10 / BOLA-IDOR detection via LLM-driven analysis. Runs locally from the mcp-api-pentest Python package.

not rated 1 +1 24d ago A tokens not measured original MIT