MCP server

Owasp

io.github.pipeworx-io/owasp

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

OWASP MCP — keyless.

Website Source

At a glance

Type

MCP server

Publisher

pipeworx.io (verified by the MCP Registry)

Status

Working at last check

Tools

46

Token cost

About 26,950 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http owasp https://gateway.pipeworx.io/owasp/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.owasp]
url = "https://gateway.pipeworx.io/owasp/mcp"

Gemini CLI

{"mcpServers":{"owasp":{"httpUrl":"https://gateway.pipeworx.io/owasp/mcp"}}}

Cursor

{"mcpServers":{"owasp":{"url":"https://gateway.pipeworx.io/owasp/mcp"}}}

VS Code

{"servers":{"owasp":{"type":"http","url":"https://gateway.pipeworx.io/owasp/mcp"}}}

Antigravity

agy mcp add owasp https://gateway.pipeworx.io/owasp/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"owasp","server_url":"https://gateway.pipeworx.io/owasp/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"owasp","server_url":"https://gateway.pipeworx.io/owasp/mcp"}

Tools

• asvs_chapters ~96 tokens
  Table of contents for the OWASP ASVS 5.0 (Application Security Verification Standard): the 17 chapters (V1–V17) with names and requirement counts per assurance level. Use to discover which chapter to pull with asvs_requirements.
• asvs_requirements ~272 tokens
  Testable security requirements from OWASP ASVS 5.0, each with its verification id (e.g. "V6.2.1"), section, level (L1/L2/L3) and text — the citable controls layer. Filter by chapter, level and/or keyword. Use to ground a control ("what does ASVS require for password storage?").
• cheat_sheet ~139 tokens
  OWASP Cheat Sheet Series — concise, practical defensive guidance. With a topic, returns the matching cheat sheet as Markdown (or candidate matches if ambiguous). Without a topic, lists all available cheat sheets.
• top10 ~140 tokens
  An OWASP Top 10 list with each category id, name, summary and the canonical URL. Lists: "web" (2021), "api" (2023), "llm" (LLM/GenAI applications 2025), "mobile" (2024). Use for awareness, mapping a finding to a category, or LLM-app threat modeling.

Browse

• GitHub tools
• Website monitoring
• Converting to Markdown
• Hiring and jobs
• GitHub and code hosting

Related MCP servers

• Dechonet
  30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
• PromptBrake Free Tools
  Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.
• Website Search
  Improve security writing, score it against rubrics, plan IR, CTI, vuln, and product strategy.
• Mitre Cwe
  MITRE CWE API MCP.
• Moltline Code Review
  Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
• Secdim
  Personalised developer security learning pathways from SecDim's challenges and courses.
• Security Recipes
  Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.
• MeshMarket
  The agent-to-agent capability exchange — rent memory, reasoning and safety, settled per call.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.pipeworx-io/owasp.svg)](https://aptlynx.net/servers/io.github.pipeworx-io/owasp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents