1. Conduid
  2. Browser
  3. API Pentest
MCP server · Browser

API Pentest

· github.com/josenieto/mcp-api-pentest

MCP server for autonomous API logic penetration testing. AI-driven detection of OWASP API Top 10 vulnerabilities (BOLA/IDOR) via multi-session authorization comparison. Supports Bearer, Basic, API Key, Cookie auth. Generates Markdown security audit reports with evidence.

Unclaimed browser
InstallView source
34Low

Scored a month ago · breakdown

About API Pentest

API Pentest is an MCP server in the Browser category: mCP server for autonomous API logic penetration testing. AI-driven detection of OWASP API Top 10 vulnerabilities (BOLA/IDOR) via multi-session authorization comparison. Supports Bearer, Basic, API Key, Cookie auth. Generates Markdown security audit reports with evidence.

Install

From source
git clone https://github.com/josenieto/mcp-api-pentest

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (11)

analyze_access_controlCompares responses from two tokens to detect IDOR

Parameters not published.

capture_contextStores a dynamic value (like a created ID) in memory

Parameters not published.

clear_contextResets the session cache

Parameters not published.

execute_security_requestSends HTTP requests with auth headers and rate limiting

Parameters not published.

export_report_jsonExports all findings as structured JSON

Parameters not published.

extract_json_valueExtracts a field from a JSON response using dot-notation

Parameters not published.

generate_reportReturns the full Markdown audit report

Parameters not published.

get_contextRetrieves a previously stored value

Parameters not published.

list_contextLists all stored key-value pairs

Parameters not published.

parse_api_specReads an OpenAPI/Swagger file and extracts routes

Parameters not published.

save_security_findingRecords a security finding to the audit report

Parameters not published.

Ask AI

✦

Ask AI about API Pentest

Powered by Claude · Grounded in docs

I know everything about API Pentest. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About API Pentest

How do I install API Pentest?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is API Pentest safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is API Pentest still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.