About Owasp
Owasp is an MCP server published by pipeworx-io in the Other category: oWASP MCP — keyless.
Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/pipeworx-io/mcp-owaspThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (4)
asvs_chaptersTable of contents for the OWASP ASVS 5.0 (Application Security Verification Standard): the 17 chapters (V1–V17) with names and requirement counts per assurance level. Use to discover which chapter to pull with asvs_requirements.
Parameters not published.
asvs_requirementsTestable security requirements from OWASP ASVS 5.0, each with its verification id (e.g. "V6.2.1"), section, level (L1/L2/L3) and text — the citable controls layer. Filter by chapter, level and/or keyword. Use to ground a control ("what does ASVS require for password storage?").
Parameters not published.
cheat_sheetOWASP Cheat Sheet Series — concise, practical defensive guidance. With a topic, returns the matching cheat sheet as Markdown (or candidate matches if ambiguous). Without a topic, lists all available cheat sheets.
Parameters not published.
top10An OWASP Top 10 list with each category id, name, summary and the canonical URL. Lists: "web" (2021), "api" (2023), "llm" (LLM/GenAI applications 2025), "mobile" (2024). Use for awareness, mapping a finding to a category, or LLM-app threat modeling.
Parameters not published.
Ask AI
Ask AI about Owasp
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.