MCP For Claude Marketplace
42Crunch

42Crunch MCP Connector for Claude

F

Automate API security testing via 42Crunch — manage collections, trigger audits, run conformance scans, and retrieve security reports directly from any AI agent.

10 tools Official Updated Jun 28, 2026 Official Vinkius Partner
More Details Connect to Claude

Connect your 42Crunch account to any AI agent to continuously test, audit, and secure your API lifecycle through natural conversation. Say goodbye to manual spec uploads and cumbersome dashboard navigations.

What you can do

  • API Collections — List and view your organizational API collections, evaluating their aggregated security scores
  • API Management — Import OpenAPI/Swagger definitions directly into collections, list imported definitions, or delete them when decommissioned
  • Static Security Audits — Trigger fresh static security audits over your OpenAPI specifications and retrieve comprehensive audit reports scoring design risks
  • Dynamic Conformance Scans — List historical scans and retrieve detailed execution reports highlighting undocumented behavior or implementation flaws

How it works

  1. Subscribe to this server
  2. Enter your 42Crunch API Token
  3. Start managing your API security governance from Claude, Cursor, or any MCP-compatible client

Who is this for?

  • DevSecOps Engineers — integrate security audits seamlessly and ask for immediate remediation steps for OWASP vulnerabilities
  • Platform Teams — govern your microservices ecosystem, track security hygiene across collections, and spot uncompliant endpoints
  • Backend Developers — quickly import a new spec iteration, trigger a scan, and compare the security grade evolution without context switching
api-securityvulnerability-scanningopenapiswaggersecurity-auditshift-left

10 tools expose this connector's capabilities to your AI agent.

get_audit_report

Download the static security audit report for an API

delete_api

Delete an API definition from the platform

get_api

Get detailed metadata and score for a specific API

get_collection

Get metadata and security score for a collection

import_api

Import an OpenAPI definition into a collection

list_apis

Each API entry includes its unique ID and security score. List all API definitions within a collection

list_collections

Use this to find the Collection ID you need to import or list APIs. List all API collections in the platform

list_scans

List dynamic conformance scans against a live API

get_scan_report

Get detailed results from a dynamic conformance scan

trigger_audit

Use this to trigger a scan after a specification gets updated. Run a fresh static security audit on an API definition

See how to talk to your AI agent using 42Crunch.

List my API collections in 42Crunch.

You have 2 API collections: 1. Mobile Services (ID: c8b2f91a) - Score: 85/100, 4 APIs 2. Internal Microservices (ID: d9c3a10b) - Score: 62/100, 12 APIs Would you like me to inspect the low-performing Internal Microservices collection?

Get the audit report for the 'User Management' API definition.

The 'User Management' API scored 55/100. Critical issues found: - Missing rate limits on `/login` endpoint (CWE-307) - OAuth2 configuration lacks detailed scope restrictions - User schema accepts generic object data without type strictness Should I propose the exact YAML additions required to resolve these?

Trigger a fresh security audit for API ID '2e4f0a91-db6c-4822-a9b0'.

A new static security audit has been triggered for the API definition. I will retrieve the fresh score and finding report momentarily...

Yes. After retrieving an audit report using your agent, you can ask the agent to act as a DevSecOps engineer. It can break down exactly why you received a low score, explain specific OWASP findings, and write the YAML or JSON patch needed to fix your OpenAPI spec instantly.

Related Connectors

SO

Socket.dev (Dependency Security) MCP

10 tools Official

Protect your software supply chain by scanning dependencies, checking package security scores, and monitoring threat feeds directly from your AI agent.

A+ View details →
TO

Tower MCP

10 tools Official

Lightweight project management and team collaboration platform — manage tasks, projects, and discussions via AI.

A+ View details →
TO

TOTVS MCP

11 tools Official

Orchestrate TOTVS ERP services — manage employees, handle financials, and monitor BPM workflows directly from any AI agent.

A+ View details →
PO

Polygonscan (Polygon Block Explorer) MCP

17 tools Official

Query the Polygon blockchain directly — check MATIC balances, track transactions, and inspect smart contracts via any AI agent.

A+ View details →