loading…
Investigate API Authentication and Authorization Risks
/api/mcp/srv-api-securityMCP enable + token are only for calling from an external client — the playground below needs neither.
Define and update API security policies for authentication requirements, rate limiting, and data protection controls
{
"type": "object",
"required": [
"policy_name",
"rules"
],
"properties": {
"rules": {
"type": "array",
"items": {
"type": "object",
"properties": {
"rule_type": {
"enum": [
"rate_limit",
"auth_required",
"data_classification",
"input_validation",
"cors_policy"
],
"type": "string"
},
"parameters": {
"type": "object"
},
"enforcement_mode": {
"enum": [
"enforce",
"monitor",
"disabled"
],
"type": "string"
}
}
}
},
"api_id": {
"type": "string"
},
"priority": {
"type": "integer",
"maximum": 100,
"minimum": 1
},
"policy_name": {
"type": "string"
}
}
}Create or update API security policies with rate limiting, access controls, and data protection rules
{
"type": "object",
"required": [
"policy_name",
"endpoint_pattern"
],
"properties": {
"policy_name": {
"type": "string"
},
"rate_limits": {
"type": "object",
"properties": {
"burst_limit": {
"type": "integer"
},
"requests_per_hour": {
"type": "integer"
},
"requests_per_minute": {
"type": "integer"
}
}
},
"access_controls": {
"type": "array",
"items": {
"type": "object",
"properties": {
"type": {
"enum": [
"ip_whitelist",
"ip_blacklist",
"geo_restriction",
"user_role"
],
"type": "string"
},
"values": {
"type": "array",
"items": {
"type": "string"
}
}
}
}
},
"data_protection": {
"type": "object",
"properties": {
"mask_pii": {
"type": "boolean",
"default": true
},
"log_requests": {
"type": "boolean",
"default": true
},
"encrypt_responses": {
"type": "boolean",
"default": false
}
}
},
"endpoint_pattern": {
"type": "string"
}
}
}Generate compliance reports for API security posture against frameworks like OWASP API Top 10, PCI DSS, or SOC 2
{
"type": "object",
"required": [
"framework"
],
"properties": {
"scope": {
"type": "object",
"properties": {
"endpoint_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"business_units": {
"type": "array",
"items": {
"type": "string"
}
}
}
},
"framework": {
"enum": [
"owasp_api_top10",
"pci_dss",
"soc2",
"gdpr",
"hipaa"
],
"type": "string"
},
"report_format": {
"enum": [
"pdf",
"json",
"csv",
"html"
],
"type": "string",
"default": "pdf"
},
"executive_summary": {
"type": "boolean",
"default": true
},
"include_remediation": {
"type": "boolean",
"default": true
}
}
}Create comprehensive API security assessment reports with executive summaries, technical findings, and remediation roadmaps
{
"type": "object",
"required": [
"report_type",
"scope"
],
"properties": {
"scope": {
"type": "object",
"properties": {
"api_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"date_range": {
"type": "object",
"properties": {
"end_date": {
"type": "string",
"format": "date"
},
"start_date": {
"type": "string",
"format": "date"
}
}
},
"environments": {
"type": "array",
"items": {
"type": "string"
}
}
}
},
"format": {
"enum": [
"pdf",
"html",
"json",
"csv"
],
"type": "string"
},
"report_type": {
"enum": [
"executive_summary",
"technical_assessment",
"compliance_audit",
"trend_analysis"
],
"type": "string"
},
"include_remediation_plan": {
"type": "boolean",
"default": true
}
}
}Analyze API traffic patterns to establish behavioral baselines for anomaly detection
{
"type": "object",
"required": [
"endpoint_ids"
],
"properties": {
"time_range": {
"enum": [
"1h",
"6h",
"24h",
"7d",
"30d"
],
"type": "string",
"default": "24h"
},
"endpoint_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"exclude_bots": {
"type": "boolean",
"default": true
},
"baseline_type": {
"enum": [
"volume",
"response_time",
"error_rate",
"payload_size",
"geographic"
],
"type": "string",
"default": "volume"
},
"minimum_requests": {
"type": "integer",
"default": 100
}
}
}Retrieve comprehensive details for a specific API endpoint including schema, authentication requirements, and security posture
{
"type": "object",
"required": [
"endpoint_id"
],
"properties": {
"endpoint_id": {
"type": "string"
},
"include_schema_diff": {
"type": "boolean",
"default": false
},
"include_traffic_analysis": {
"type": "boolean",
"default": false
}
}
}Retrieve detailed vulnerability information including proof of concept, remediation guidance, and affected endpoints
{
"type": "object",
"required": [
"vulnerability_id"
],
"properties": {
"include_poc": {
"type": "boolean",
"default": false
},
"vulnerability_id": {
"type": "string"
},
"include_remediation": {
"type": "boolean",
"default": true
}
}
}Retrieve API security vulnerabilities filtered by severity, OWASP category, or endpoint
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 100
},
"offset": {
"type": "integer",
"default": 0
},
"status": {
"enum": [
"open",
"in_progress",
"resolved",
"false_positive"
],
"type": "string"
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low",
"info"
],
"type": "string"
},
"endpoint_id": {
"type": "string"
},
"owasp_category": {
"enum": [
"broken_object_level_authorization",
"broken_user_authentication",
"excessive_data_exposure",
"lack_of_resources_rate_limiting",
"broken_function_level_authorization",
"mass_assignment",
"security_misconfiguration",
"injection",
"improper_assets_management",
"insufficient_logging_monitoring"
],
"type": "string"
}
}
}Analyze API traffic patterns for anomalies, rate limiting violations, and suspicious request patterns
{
"type": "object",
"required": [
"api_id"
],
"properties": {
"api_id": {
"type": "string"
},
"time_range": {
"enum": [
"1h",
"6h",
"24h",
"7d",
"30d"
],
"type": "string"
},
"alert_thresholds": {
"type": "object",
"properties": {
"request_rate": {
"type": "integer"
},
"response_time_ms": {
"type": "integer"
},
"error_rate_percent": {
"type": "number"
}
}
},
"include_payloads": {
"type": "boolean",
"default": false
}
}
}Search API access logs and security events using filters for endpoints, IPs, status codes, and time ranges
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"default": 1000
},
"query": {
"type": "string",
"description": "Lucene-style query syntax for log search"
},
"filters": {
"type": "object",
"properties": {
"source_ips": {
"type": "array",
"items": {
"type": "string"
}
},
"user_agents": {
"type": "array",
"items": {
"type": "string"
}
},
"endpoint_ids": {
"type": "array",
"items": {
"type": "string"
}
},
"status_codes": {
"type": "array",
"items": {
"type": "integer"
}
}
}
},
"sort_by": {
"enum": [
"timestamp",
"response_time",
"status_code"
],
"type": "string",
"default": "timestamp"
},
"time_range": {
"type": "object",
"properties": {
"end_time": {
"type": "string",
"format": "date-time"
},
"start_time": {
"type": "string",
"format": "date-time"
}
}
}
}
}Discover and inventory API endpoints from target hosts, domains, or networks with optional authentication
{
"type": "object",
"required": [
"targets"
],
"properties": {
"targets": {
"type": "array",
"items": {
"type": "string"
},
"description": "IP addresses, domains, or CIDR ranges to scan"
},
"scan_type": {
"enum": [
"passive",
"active",
"comprehensive"
],
"type": "string",
"default": "active"
},
"authentication": {
"type": "object",
"properties": {
"type": {
"enum": [
"bearer",
"basic",
"apikey",
"oauth2"
],
"type": "string"
},
"credentials": {
"type": "string"
}
}
},
"include_deprecated": {
"type": "boolean",
"default": false
}
}
}Query API security incidents and breaches with filtering by attack vectors, affected assets, and timeline
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"maximum": 500,
"minimum": 1
},
"query": {
"type": "string"
},
"status": {
"enum": [
"open",
"investigating",
"contained",
"resolved"
],
"type": "string"
},
"severity": {
"type": "array",
"items": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
}
},
"date_range": {
"type": "object",
"properties": {
"end_date": {
"type": "string",
"format": "date-time"
},
"start_date": {
"type": "string",
"format": "date-time"
}
}
},
"attack_vector": {
"type": "array",
"items": {
"enum": [
"injection",
"broken_authentication",
"sensitive_data_exposure",
"xxe",
"broken_access_control",
"security_misconfiguration",
"xss",
"insecure_deserialization",
"components_with_vulnerabilities",
"insufficient_logging"
],
"type": "string"
}
}
}
}Validate API authentication mechanisms and test for common authentication bypasses
{
"type": "object",
"required": [
"endpoint_id"
],
"properties": {
"auth_tests": {
"type": "array",
"items": {
"enum": [
"broken_authentication",
"jwt_vulnerabilities",
"oauth_misconfig",
"api_key_exposure",
"session_fixation"
],
"type": "string"
},
"default": [
"broken_authentication",
"jwt_vulnerabilities"
]
},
"credentials": {
"type": "object",
"properties": {
"type": {
"enum": [
"bearer",
"basic",
"apikey",
"oauth2"
],
"type": "string"
},
"token": {
"type": "string"
},
"password": {
"type": "string"
},
"username": {
"type": "string"
}
}
},
"endpoint_id": {
"type": "string"
}
}
}Update the status and priority of API security incidents with analyst notes and remediation actions
{
"type": "object",
"required": [
"incident_id",
"status"
],
"properties": {
"status": {
"enum": [
"new",
"investigating",
"contained",
"resolved",
"false_positive"
],
"type": "string"
},
"priority": {
"enum": [
"p1",
"p2",
"p3",
"p4"
],
"type": "string"
},
"assigned_to": {
"type": "string"
},
"incident_id": {
"type": "string"
},
"analyst_notes": {
"type": "string"
},
"remediation_actions": {
"type": "array",
"items": {
"enum": [
"block_ip",
"disable_endpoint",
"revoke_tokens",
"apply_rate_limit",
"escalate_to_soc"
],
"type": "string"
}
}
}
}Modify vulnerability risk scores based on business context, exploitability, and environmental factors
{
"type": "object",
"required": [
"vulnerability_id",
"risk_score",
"justification"
],
"properties": {
"risk_score": {
"type": "number",
"maximum": 10,
"minimum": 0
},
"reviewer_id": {
"type": "string"
},
"justification": {
"type": "string"
},
"exploitability": {
"enum": [
"easy",
"moderate",
"difficult"
],
"type": "string"
},
"business_impact": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"vulnerability_id": {
"type": "string"
}
}
}