42crunch-api-security-testing
Audits OpenAPI specs with 42Crunch, finds OWASP API security issues such as BOLA and BFLA, applies AI-suggested fixes and validates them in an audit, scan, remediate, validate loop.
- Kind
- Plugin
- Works with
- Claude Code
- Source
- anthropics/claude-plugins-official @ 58267944f921
- Path
- .claude-plugin/marketplace.json#42crunch-api-security-testing
- Jobs
- Testing, Review
- Topics
- Security audits, APIs, Unit tests & TDD
Credit
- Made by
- anthropics
- Original
- github.com/42Crunch-AI/claude-plugins.git
- License
- Apache-2.0
Listed by Skill Manifest; not made by us.
InstallInstall it from a plugin marketplace.
/plugin install 42crunch-api-security-testing@claude-plugins-official
Install factsScanned 2 Nov 2026
- Adds
- A plugin installed through /plugin
- Runs scripts
- Unknown
- Uses the network
- None found
- Needs secrets
- None found
- Source revision
- 58267944f921
- Licence
- Apache-2.0
- Last activity
- 1 Nov 2026
- Review
- Reviewed
Found by a static scan of the stored text; nothing is run. “None found” is not a guarantee, so read what you install before you run it.
- The plugin's parts are not listed in the stored manifest
42crunch-api-security-testing
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
Source: https://github.com/42Crunch-AI/claude-plugins.git
{
"name": "42crunch-api-security-testing",
"description": "Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.",
"author": {
"name": "42Crunch"
},
"category": "security",
"source": {
"source": "git-subdir",
"url": "https://github.com/42Crunch-AI/claude-plugins.git",
"path": "plugins/api-security-testing",
…