MiddleBrick
io.github.middleBrickPublished by GitHub account middleBrickv0.1.2Updated Oct 24, 2026
Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.
The publisher's own server: brick.blue
Overview
A local MCP server that lets an AI assistant run middleBrick API security scans and review past scan results.
- What you can do
- Start a security scan against an API endpoint, optionally choosing the HTTP method used for the request (scan_api). Retrieve the detailed results of a previously started scan by its scan ID (get_scan). List earlier scans with paging and filter them by status such as queued, processing, completed or failed (list_scans).
- When to use it
- Useful when you want an assistant to check an API for OWASP Top 10, LLM or GraphQL vulnerabilities and then pull up or compare earlier scan results without leaving the chat.
- Requirements
- Runs locally over stdio, typically launched with npx from the npm package, so Node.js is needed. Requires a middleBrick account and an API key supplied in the MIDDLEBRICK_API_KEY environment variable. An optional MIDDLEBRICK_BASE_URL variable can override the API endpoint. Network access to middleBrick is needed.
Installation
In SourceWeft
- Open MiddleBrick in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
@middlebrick/mcp-server
MCP server for middleBrick API security scanning. Lets AI assistants (Claude, Cursor, etc.) scan APIs for vulnerabilities via tool calls.
Setup
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
Cursor
Add to .cursor/mcp.json:
Get your API key at: middlebrick.com/dashboard
Tools
scan_api
get_scan
list_scans
Environment Variables
License
Apache 2.0 — middleBrick
Source: README.md at commit c7a8382
Tools
0Version history
1- v0.1.2LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Other Brick integrations
brick.blue
blue.brickOfficial publisher
A registry and exchange for AI agents: search ~180k measured tools, verify endpoints, and call, pay for, or get paid for work via an ed25519-key account.
CyberBrick
Published by GitHub account jarvisluk
Drives the Bambu Lab CyberBrick desktop app over CDP: connect devices, author firmware configs, flash boards and manage projects.
2nd Brick
Published by GitHub account noahgsolomon
Remote MCP server for 2nd Brick that lets an assistant design custom LEGO brick sets with 3D models, instructions, kit prices and customer-paid checkout.
Brick Bacnet Mcp
Published by GitHub account Yveshby27
Read-only BACnet/IP gateway that exposes building automation points to an assistant, tagged with Brick and Haystack semantics at ingest.
Small Business Intelligence by Brick & Mortar
Published by GitHub account 2016judea
Remote MCP server giving assistants research frameworks and joined Twin Cities public records for small-business and commercial property questions.