@mhdd_24/api-security-mcp

Identify API security weaknesses.

Same architecture as @mhdd_24/sublime-mcp.

Full documentation: docs/WIKI.md

How it works (30 seconds)

You (chat) → MCP client → api-security-mcp → API Security APIs / CLIs / local tools

Prerequisites

| Requirement | Notes | |-------------|--------| | Node.js 18+ | ESM TypeScript MCP server | | Credentials / CLIs | See environment variables below |

Install

Option A — npm (after publish)

npm install -g @mhdd_24/api-security-mcp

Option B — npx

npx @mhdd_24/api-security-mcp

Option C — clone and build

git clone https://github.com/Mhdd-24/API-Security-MCP.git
cd API-Security-MCP
npm install
npm run build
node dist/index.js

Configure Cursor

Edit ~/.cursor/mcp.json:

{
  "mcpServers": {
    "apisec": {
      "command": "npx",
      "args": ["-y", "@mhdd_24/api-security-mcp"],
      "env": {
        "PROJECT_ROOT": "..."
      }
    }
  }
}

Local development:

{
  "command": "node",
  "args": ["/absolute/path/to/API-Security-MCP/dist/index.js"]
}

Environment variables

| Variable | Description | |----------|-------------| | PROJECT_ROOT | Default project/repository root |

Tools

| Tool | Description | |------|-------------| | apisec_status | Health check for API Security MCP. | | apisec_scan_spec | Scan OpenAPI for security gaps (auth missing, etc). | | apisec_checks | Return a security test checklist for an API. |

License

ISC