# middleBrick | API-Security

> middleBrick | API-Security — middlebrick-api-security. Use this tool when you need to identify and mitigate API security risks, such as OWASP Top 10 vulnerabilities, to protect against attacks and data breaches. It scans APIs for weaknesses in authentication, authorization, and data exposure, providing a security risk score as output. Ideal for use in development, testing, and production environments to ensure secure API design and implementation.

Canonical page: https://skillsregistry.net/skills/middlebrick-api-security  
JSON: https://api.skillsregistry.net/v1/skills/middlebrick-api-security

## Description

Scan any API for OWASP Top 10 vulnerabilities and get a security risk score. Covers authentication, authorization (BOLA/BFLA), injection, data exposure, rate limiting, GraphQL, and LLM security.

## Trust

- **Trust score (0–1):** 0.50
- **Verification tier:** unverified

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** ai-ml
- **Updated:** 2026-08-10

## Source

- **Source listing:** [Smithery](https://smithery.ai/server/middlebrick/api-security)

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "middlebrick-api-security"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/middlebrick-api-security` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/middlebrick-api-security/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt