get_scan
Get results of a previous middleBrick scan by its ID
Scan an API endpoint for security vulnerabilities, get a risk score, and read back a previous scan by id.
LABSCO SUMMARY
A security scan whose result exists only in the response is a snapshot nobody can cite. Storing them with ids means a finding can be referenced in a ticket, re-read after a fix, and compared against the next run — which is how scanning becomes a practice rather than an event. The surface is deliberately small. The important operational point is the obvious one: this actively probes an endpoint, so it belongs pointed at your own APIs or ones you have written permission to test.
A three-tool API security scanning client: run a scan against an endpoint, retrieve a past scan's results, and list what has been scanned before.
MIDDLEBRICK_API_KEY. Scanning an endpoint is an active test — run it against APIs you are authorised to test.
One command plus a key — npx -y @middlebrick/mcp-server, then supply credentials
USE CASES
Scan it and read the findings with the risk score, on an API you are authorised to test.
Retrieve the scan by id when the fix is being reviewed, rather than re-running and hoping it reproduces.
Counted once with only startup setup. Other versions, modes or optional credentials may expose a different list.
get_scanGet results of a previous middleBrick scan by its ID
list_scansList previous middleBrick API security scans
scan_apiScan an API endpoint for security vulnerabilities and get a risk score
BEFORE YOU INSTALL
3 tools when we connected.
Both documented clients run the server on your machine.
CONTEXT COST
Rated by the size of the 3 tool definitions that ride along on every turn, not by how many there are
INSTALLATION
npx -y @middlebrick/mcp-server{
"mcpServers": {
"middlebrick": {
"command": "npx",
"args": [
"-y",
"@middlebrick/mcp-server"
],
"env": {
"MIDDLEBRICK_API_KEY": "<YOUR_MIDDLEBRICK_API_KEY>"
}
}
}
}