Directory / Claude community plugins (Anthropic) / 42crunch-api-security-testing
42crunch-api-security-testing
Automate API security directly in Claude Code with 42Crunch. This plugin enables developers to audit OpenAPI specifications, detect OWASP API vulnerabilities including BOLA and BFLA, run live conformance and authorization tests, and apply AI-assisted fixes, all through natural language. Designed for AI-assisted development workflows, the plugin provides continuous security guardrails across the full lifecycle of your API. It combines static analysis of OpenAPI definitions with dynamic runtime testing to ensure your APIs behave securely in real conditions. With a simple audit to scan to remediate to validate loop, developers can identify issues early, fix them with confidence, and verify that security requirements are met before deployment. The plugin integrates seamlessly into Claude Code, allowing teams to embed API security directly into their development process without switching tools. Key capabilities include static security audit of OpenAPI specifications with scored findings, detection of OWASP API Security risks including authorization flaws like BOLA and BFLA, live API scanning for conformance and runtime behavior validation, AI-assisted remediation with user-controlled changes, an end to end security testing pipeline combining audit and scan, and automatic generation of OpenAPI specifications from source code. Whether you are working with existing APIs or generating new ones, 42Crunch helps ensure that security is built in from the start and continuously validated throughout development.Description from the marketplace entry / plugin manifest.
Information source
Copied from the Claude community plugins (Anthropic) catalog (anthropics/claude-plugins-community), maintained by Anthropic (community submissions).
- Marketplace entry:
.claude-plugin/marketplace.json
Links are pinned to commit 06ec7b6 (2026-10-13), the version we synced. Not reviewed by us.
Install
Add the marketplace (once, in Claude Code)
/plugin marketplace add anthropics/claude-plugins-communityIn a Claude Code session
/plugin install 42crunch-api-security-testing@claude-communityFrom your shell
claude plugin install 42crunch-api-security-testing@claude-communityCommands follow each host's documentation (Claude Code, Claude Cowork docs). gh skill needs GitHub CLI 2.90 or later and is in public preview.
Listed from Anthropic (community submissions)'s catalog, not reviewed by us. Read the source before installing.
- Catalog
- Claude community plugins (Anthropic) (
claude-community) - Information source
- marketplace.json in anthropics/claude-plugins-community
- Author
- Not stated in the source
- Source code
- 42Crunch-AI/claude-plugins
- Homepage
- docs.42crunch.com
- License
- Not stated
- Repository stars
- 1 for 42Crunch-AI/claude-plugins
- Added to catalog
- 2026-04-17
- Last change
- 2026-09-28 (last push to the repo)
What it contains
Hosted in an external repository, so contents are not counted here. See the source link.
Similar in Security
- claude-seo (Claude community plugin)
- rustunnel (Claude community plugin)
- very-good-ai-flutter-plugin (Claude community plugin)
- agentic-security (Claude community plugin)
- malchela (Claude community plugin)
- great-cto (Claude community plugin)