MCP For Claude Marketplace
Levo.ai (API Security & Observability)

Levo.ai (API Security & Observability) MCP Connector for Claude

A+

Secure your APIs via Levo.ai — audit endpoints, monitor sensitive data (PII/PHI), and manage OWASP vulnerabilities.

10 tools Official Updated Jun 28, 2026 Official Vinkius Partner
More Details Connect to Claude

Connect your Levo.ai account to any AI agent and take full control of your API security posture and runtime observability through natural conversation.

What you can do

  • Endpoint Orchestration — List all auto-discovered API endpoints (REST, GraphQL, gRPC) and identify undocumented shadow or zombie APIs directly from your agent
  • Sensitive Data Audit — Query categorizations for endpoints exposing regulated data flows including PII (names, emails), PHI (medical), and financial boundaries
  • Vulnerability Management — Monitor active API security vulnerabilities validating against OWASP boundaries, including BOLA instances and broken authentication
  • OpenAPI Generation — Export live, precisely accurate OpenAPI specifications derived immediately from actual observed traffic rather than static manual definitions
  • Behavioral Monitoring — Analyze runtime API traffic patterns and anomalous observations detected by live sensors indicating unexpected schema drift
  • Diagnostic Investigation — Retrieve detailed diagnostic exploitation evidence for specific vulnerabilities to understand root causes and remediation steps

How it works

  1. Subscribe to this server
  2. Enter your Levo.ai API Token and Organization ID
  3. Start monitoring your API security from Claude, Cursor, or any MCP-compatible client

Who is this for?

  • Security Engineers — hunt for API threats and monitor sensitive data exposure through natural conversation without manual log filtering
  • Backend Developers — audit API endpoint schemas and verify build-time security results to ensure only secure APIs reach production
  • Compliance Officers — automate the auditing of regulated data flows and report on global API security posture across different environments
api-securityobservabilityvulnerability-scanningpii-detectionopenapithreat-detection

10 tools expose this connector's capabilities to your AI agent.

list_applications

List all API applications (services) tracked by Levo.ai

list_catalog_endpoints

Identifies REST, GraphQL, gRPC, and SOAP endpoints — including undocumented shadow and zombie APIs mapped dynamically. List all discovered API endpoints in the Levo.ai catalog

get_endpoint_details

Get deep detailed schema structure for a specific discovered API endpoint

list_environments

List deployment boundaries environments monitored by Levo active sensors

export_openapi_spec

Export a live auto-generated OpenAPI payload specification for an application

get_observation

Get details of a specific runtime anomalous observation

get_vulnerability

Get detailed diagnostic exploitation evidence for a specific API vulnerability

list_observations

List runtime API behavior observations detected by Levo sensors

list_sensitive_data

List categorized API endpoints exposing sensitive or regulated data flows

list_vulnerabilities

List active API security vulnerabilities discovered across all applications

See how to talk to your AI agent using Levo.ai (API Security & Observability).

List all discovered API endpoints in our Levo catalog

I've found 24 total endpoints across 3 applications. Highlights include '/v1/users' (REST), '/graphql' (GraphQL), and 5 undocumented shadow APIs discovered in the 'Payments' service. Would you like to inspect the sensitive data status for these?

Show me the active OWASP vulnerabilities for the 'Checkout' application

Retrieving vulnerabilities for 'Checkout'… I've identified 2 High impact issues: 1) BOLA (Broken Object Level Authorization) on '/api/v1/orders/{id}', 2) Broken User Authentication. I can provide the diagnostic exploitation evidence for both.

Generate a live OpenAPI spec for the 'User Management' service

Generating OpenAPI spec based on live traffic… Done. I've successfully exported the specification for the User Management service. It includes 12 verified endpoints and mapped request/response schemas. Would you like the JSON payload?

Yes. Use the `list_catalog_endpoints` tool to see the full inventory auto-discovered by Levo sensors. Your agent can highlight 'Shadow' or 'Zombie' APIs that exist in your infrastructure but are missing from official documentation.

Related Connectors

AF

Afosto MCP

4 tools Official

Retail and e-commerce engine — manage orders, inventory, products, and customers via AI.

F View details →
SH

ShipCompliant MCP

8 tools Official

Check wine shipping compliance, calculate alcohol taxes, verify licenses, and get state regulations for your Sovos ShipCompliant account through natural conversation.

A+ View details →
GU

Guidebook MCP

10 tools Official

Automate mobile app content management via Guidebook — manage guides, sessions, speakers, and custom lists directly from any AI agent.

A+ View details →
SK

SkuVault MCP

20 tools Official

Manage your SkuVault inventory, products, lots, and purchase orders directly from any AI agent.

A+ View details →