1. Conduid
  2. Security
  3. Overstep
MCP server · Security

Overstep

· github.com/kabiri-labs/overstep

Authorization testing for REST APIs and MCP servers. Declare who may do what as a matrix, and overstep turns it into positive and negative tests that catch BOLA, BFLA, BOPLA and privilege escalation — with drift baselines, confidence grading and CWE/OWASP-tagged SARIF for CI.

Unclaimed agent-securityapi-securityappsecauthorizationauthorization-testingbflabolabroken-access-controlci-cddastdevsecopsidormcpmcp-securitymodel-context-protocolowaspprivilege-escalationsarifsecurity-testing
InstallView source
34Low

Scored a month ago · breakdown

About Overstep

Overstep is an MCP server in the Security category: authorization testing for REST APIs and MCP servers. Declare who may do what as a matrix, and overstep turns it into positive and negative tests that catch BOLA, BFLA, BOPLA and privilege escalation — with drift baselines, confidence grading and CWE/OWASP-tagged SARIF for CI.

Install

From source
git clone https://github.com/kabiri-labs/overstep

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Overstep

Powered by Claude · Grounded in docs

I know everything about Overstep. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Overstep

How do I install Overstep?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Overstep safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Overstep still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.