← CyberMCP

CyberMCP 34bb11d76ea7ab9d3c4a9a42584ce7129f6e7c7d

source_git · ricauts/cybermcp · current release

14
Tools
10
Resources
2
Templates
0
Prompts

Observation

Observed 2026-08-25T09:06:11.372Z using mcpSecurity-inventory. Status: succeeded. Negotiated protocol: 2025-03-26.

Server capabilities
{
  "tools": {
    "listChanged": true
  },
  "resources": {
    "listChanged": true
  }
}

Tools 14

ToolCategoryAnnotationsRisk
api_login
Input schema
{
  "type": "object",
  "properties": {
    "login_url": {
      "type": "string",
      "format": "uri",
      "description": "API login endpoint URL"
    },
    "credentials": {
      "type": "object",
      "additionalProperties": {
        "type": "string"
      },
      "description": "Login credentials as key-value pairs"
    },
    "method": {
      "type": "string",
      "enum": [
        "post",
        "get"
      ],
      "default": "post",
      "description": "HTTP method to use"
    },
    "token_path": {
      "type": "string",
      "default": "token",
      "description": "Path to token in the response (e.g., 'data.accessToken')"
    },
    "token_prefix": {
      "type": "string",
      "default": "Bearer",
      "description": "Token prefix to use in Authorization header"
    },
    "header_name": {
      "type": "string",
      "default": "Authorization",
      "description": "Header name to use for the token"
    }
  },
  "required": [
    "login_url",
    "credentials"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
auth_bypass_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "auth_header": {
      "type": "string",
      "description": "Authentication header name (if different from standard)"
    },
    "auth_token": {
      "type": "string",
      "description": "Authentication token (if not using the currently authenticated session)"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT",
        "DELETE",
        "PATCH"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "use_session_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use the current session authentication if available"
    }
  },
  "required": [
    "endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
auth_status
Input schema
{
  "type": "object",
  "properties": {},
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
basic_auth
Input schema
{
  "type": "object",
  "properties": {
    "username": {
      "type": "string",
      "description": "Username for authentication"
    },
    "password": {
      "type": "string",
      "description": "Password for authentication"
    }
  },
  "required": [
    "username",
    "password"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
clear_auth
Input schema
{
  "type": "object",
  "properties": {},
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
jwt_vulnerability_check
Input schema
{
  "type": "object",
  "properties": {
    "jwt_token": {
      "type": "string",
      "description": "JWT token to analyze for vulnerabilities"
    }
  },
  "required": [
    "jwt_token"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
oauth2_auth
Input schema
{
  "type": "object",
  "properties": {
    "client_id": {
      "type": "string",
      "description": "OAuth2 client ID"
    },
    "client_secret": {
      "type": "string",
      "description": "OAuth2 client secret"
    },
    "token_url": {
      "type": "string",
      "format": "uri",
      "description": "OAuth2 token endpoint URL"
    },
    "authorization_url": {
      "type": "string",
      "format": "uri",
      "description": "OAuth2 authorization endpoint URL (for authorization code flow)"
    },
    "grant_type": {
      "type": "string",
      "enum": [
        "client_credentials",
        "password",
        "authorization_code",
        "refresh_token"
      ],
      "default": "client_credentials",
      "description": "OAuth2 grant type"
    },
    "username": {
      "type": "string",
      "description": "Username (for password grant type)"
    },
    "password": {
      "type": "string",
      "description": "Password (for password grant type)"
    },
    "scope": {
      "type": "string",
      "description": "OAuth2 scope"
    },
    "redirect_uri": {
      "type": "string",
      "description": "Redirect URI (for authorization code flow)"
    }
  },
  "required": [
    "client_id",
    "token_url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
path_traversal_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "parameter_name": {
      "type": "string",
      "description": "Name of the parameter to test for path traversal"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint",
    "parameter_name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
rate_limit_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT",
        "DELETE"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "request_count": {
      "type": "number",
      "minimum": 5,
      "maximum": 50,
      "default": 20,
      "description": "Number of requests to send"
    },
    "request_delay_ms": {
      "type": "number",
      "minimum": 0,
      "maximum": 1000,
      "default": 100,
      "description": "Delay between requests in milliseconds"
    },
    "auth_header": {
      "type": "string",
      "description": "Authentication header (if any)"
    },
    "request_body": {
      "type": "string",
      "description": "Request body (for POST/PUT requests)"
    }
  },
  "required": [
    "endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
security_headers_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "HEAD",
        "OPTIONS"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
sensitive_data_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT",
        "DELETE"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "request_body": {
      "type": "string",
      "description": "Request body (for POST/PUT requests)"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
sql_injection_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "parameter_name": {
      "type": "string",
      "description": "Name of the parameter to test for SQL injection"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "original_value": {
      "type": "string",
      "description": "Original value for the parameter"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint",
    "parameter_name",
    "original_value"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
token_auth
Input schema
{
  "type": "object",
  "properties": {
    "token": {
      "type": "string",
      "description": "Authentication token"
    },
    "token_type": {
      "type": "string",
      "default": "Bearer",
      "description": "Token type (Bearer, JWT, etc.)"
    },
    "refresh_token": {
      "type": "string",
      "description": "Refresh token (if available)"
    },
    "expires_in": {
      "type": "number",
      "description": "Token expiration time in seconds"
    }
  },
  "required": [
    "token"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——
xss_check
Input schema
{
  "type": "object",
  "properties": {
    "endpoint": {
      "type": "string",
      "format": "uri",
      "description": "API endpoint to test"
    },
    "parameter_name": {
      "type": "string",
      "description": "Name of the parameter to test for XSS"
    },
    "http_method": {
      "type": "string",
      "enum": [
        "GET",
        "POST",
        "PUT"
      ],
      "default": "GET",
      "description": "HTTP method to use"
    },
    "use_auth": {
      "type": "boolean",
      "default": true,
      "description": "Whether to use current authentication if available"
    }
  },
  "required": [
    "endpoint",
    "parameter_name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
—— · ——

Resources 10

Resource templates 2

Prompts 0

Let’s talk about MCP security.

Share your details and our security team will contact you.