CyberMCP - Cybersecurity API Testing with MCP
About
CyberMCP is a Model Context Protocol (MCP) server designed for testing backend APIs for security vulnerabilities. It provides a set of specialized tools and resources that can be used by LLMs to identify common security issues in APIs.
Details
- Author
- ricauts
- GitHub stars
- 15
- Downloads
- 350
- Categories
- Developer Tools, Security
Jump to
- Authentication testing (JWT analysis, bypass detection, OAuth2 flows)
- Injection testing (SQL injection, XSS vulnerability detection)
- Data protection checks (sensitive data exposure, path traversal)
- Rate limiting and DoS vulnerability assessment
- OWASP security header validation
- Comprehensive security checklists and testing guides
Clone the repository, run npm install, npm run build, then start the server with npm start (stdio mode) or set TRANSPORT=http PORT=3000 npm start for HTTP mode. Provide natural‑language commands such as basic_auth or auth_bypass_check to the AI agent, which will execute the corresponding security tests on target endpoints.
🔒 CyberMCP
AI-powered Cybersecurity API Testing with Model Context Protocol (MCP)
CyberMCP is a Model Context Protocol (MCP) server that enables AI agents to perform comprehensive security testing on backend APIs. It provides 14 specialized security tools and 10 resources for identifying vulnerabilities like authentication bypass, injection attacks, data leakage, and security misconfigurations.
🚀 Quick Start
```bash
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
