MCP servers tagged bola

4 live MCP servers tagged "bola", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with bola.

live servers

avg trust

Overstep

Authorization testing for REST APIs and MCP servers. Declare who may do what as a matrix, and overstep turns it into positive and negative tests that catch BOLA, BFLA, BOPLA and p…

Websec Validator

Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.

OpenBOLA

Authorization-first, deterministic BOLA/IDOR validation for HTTP APIs

Objauthz Lab

WRG-11

Vulnerable-by-design MCP server for learning object-level / cross-tenant authorization (BOLA/IDOR) bugs, plus Semgrep rules that find the same shapes in JavaScript/TypeScript, Pyt…