42Crunch Connector for AI agents.

10 live capabilities

Automate API security audits and manage OpenAPI specifications

Live agent request 42Crunch / Connector

Waiting for input…

AI Agent

Why people use 42Crunch

42Crunch for Automated API Security Audits

This Connector puts that entire loop into your chat. You can import a spec and trigger an audit in one turn. Your agent gives you the score and the risks immediately, so you can fix the issues while the code is still fresh in your mind.

What Vinkius changes

You get automated API security governance directly inside your AI chat.

Use it from Claude, ChatGPT, Cursor or another AI client you already have.

One account · 5,900+ Connectors

Real-world use case 01

Instant audit after a spec update

A developer updates a Swagger file and asks the agent to trigger_audit.
Real-world use case 02

Security health overview for platform teams

A platform lead asks the agent to list_collections.
Real-world use case 03

Identifying production behavior flaws

An engineer notices an issue in production and asks the agent to list_scans for the Gateway API to find the last dynamic conformance report.

Complete set · 10capabilities

The complete 42Crunch capability set.

These are the exact actions your AI can choose when you ask it to work with 42Crunch.

Capability set01 / 03

01—04

4 capabilities in this set.

Part of 10 available through 42Crunch.

01 Capability
Get audit report
Downloads the static security audit report for a specific API to show design risks.
02 Capability
List scans
Shows a history of dynamic conformance scans performed against a live API.
03 Capability
Get scan report
Provides the results of a dynamic conformance scan to highlight implementation flaws.
04 Capability
Trigger audit
Starts a fresh static security audit on an API definition after you update the spec.

Capability set02 / 03

05—07

3 capabilities in this set.

Part of 10 available through 42Crunch.

05 Capability
Delete api
Removes an API definition from your platform to keep your environment clean.
06 Capability
Get api
Pulls detailed metadata and the current security score for a specific API.
07 Capability
Get collection
Fetches the metadata and security score for an entire API collection.

Capability set03 / 03

08—10

3 capabilities in this set.

Part of 10 available through 42Crunch.

08 Capability
Import api
Brings an OpenAPI definition into a collection for immediate security testing.
09 Capability
List apis
Shows all API entries in a collection along with their unique IDs and scores.
10 Capability
List collections
Lists all your API collections so you can find the right ID for your work.

Set up in minutes

One URL. Then ask 42Crunch to work.

Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use 42Crunch from the conversation.

Choose your client

Live preview

Advanced clients IDE · CLI

Claude · Web + desktop

Official guide ↗

Connector URL · ready to paste

Streamable HTTP

https://edge.vinkius.com/vk_preview_Gi3PrK2xNbiurYu9rVegSxEQmPykAdCxogXvksIV/mcp

Step 01

Open Connectors

In Claude Web or Claude Desktop, open Settings and choose Connectors.
Step 02

Add the URL

Choose Add custom connector, name it 42Crunch, and paste the URL above.
Step 03

Turn it on in chat

Select +, open Connectors, and enable 42Crunch for the conversation.

ChatGPT · Web + desktop

Official guide ↗

Connector URL · ready to paste

Streamable HTTP

https://edge.vinkius.com/vk_preview_Gi3PrK2xNbiurYu9rVegSxEQmPykAdCxogXvksIV/mcp

Step 01

Open MCP settings

On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
Step 02

Add the URL

Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the 42Crunch URL.
Step 03

Save and start

Save the connection and enable 42Crunch in your conversation. Desktop may ask you to restart once.

Cursor · IDE configuration

Official guide ↗

Advanced setup

{
  "mcpServers": {
    "42crunch": {
      "url": "https://edge.vinkius.com/vk_preview_Gi3PrK2xNbiurYu9rVegSxEQmPykAdCxogXvksIV/mcp"
    }
  }
}

Step 01

Open MCP Settings

Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
Step 02

Add the server config

Paste the JSON configuration above into the mcp.json file that opens
Step 03

Save the file

Cursor will automatically detect the new Connector
Step 04

Start using 42Crunch

Open Agent mode in chat and ask: "Using 42Crunch, help me...". 10 tools available

VS Code Copilot · IDE configuration

Official guide ↗

Advanced setup

{
  "mcpServers": {
    "42crunch": {
      "url": "https://edge.vinkius.com/vk_preview_Gi3PrK2xNbiurYu9rVegSxEQmPykAdCxogXvksIV/mcp"
    }
  }
}

Step 01

Create MCP config

Create a .vscode/mcp.json file in your project root
Step 02

Add the server config

Paste the JSON configuration above
Step 03

Enable Agent mode

Open GitHub Copilot Chat and switch to Agent mode using the dropdown
Step 04

Start using 42Crunch

Ask Copilot: "Using 42Crunch, help me...". 10 tools available

Windsurf · IDE configuration

Official guide ↗

Advanced setup

{
  "mcpServers": {
    "42crunch": {
      "url": "https://edge.vinkius.com/vk_preview_Gi3PrK2xNbiurYu9rVegSxEQmPykAdCxogXvksIV/mcp"
    }
  }
}

Step 01

Open MCP Settings

Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
Step 02

Add the server

Paste the JSON configuration above into mcp_config.json
Step 03

Save and reload

Windsurf will detect the new server automatically
Step 04

Start using 42Crunch

Open Cascade and ask: "Using 42Crunch, help me...". 10 tools available

Cline · IDE configuration

Official guide ↗

Advanced setup

{
  "mcpServers": {
    "42crunch": {
      "url": "https://edge.vinkius.com/vk_preview_Gi3PrK2xNbiurYu9rVegSxEQmPykAdCxogXvksIV/mcp"
    }
  }
}

Step 01

Open Cline MCP Settings

Click the Connectors icon in the Cline sidebar panel
Step 02

Add remote server

Click "Add Connector" and paste the configuration above
Step 03

Enable the server

Toggle the server switch to ON
Step 04

Start using 42Crunch

Ask Cline: "Using 42Crunch, help me...". 10 tools available

Claude Code · Terminal command

Official guide ↗

Advanced setup

claude mcp add 42crunch --transport http "https://edge.vinkius.com/vk_preview_Gi3PrK2xNbiurYu9rVegSxEQmPykAdCxogXvksIV/mcp"

Step 01

Install Claude Code

Run npm install -g @anthropic-ai/claude-code if not already installed
Step 02

Add the Connector

Run the command above in your terminal
Step 03

Verify the connection

Run claude mcp to list connected servers, or type /mcp inside a session
Step 04

Start using 42Crunch

Ask Claude: "Using 42Crunch, show me...". 10 tools are ready

Where the request belongs

Work 42Crunch can move forward.

Built around the request

This is for DevSecOps engineers tired of manual security scans and platform teams who need to maintain security hygiene across hundreds of microservices.

DevSecOps Engineer

Uses the Connector to trigger audits every time a spec changes and gets remediation steps for OWASP vulnerabilities.

Platform Team

Tracks security hygiene across dozens of collections to spot uncompliant endpoints in the ecosystem.

Backend Developer

Quickly imports new spec iterations and checks security grades without switching tabs.

When one Connector is not enough

Combine 42Crunch with the systems that finish the task.

View all recipes

Find API Vulnerabilities First Using MCP

Your OpenAPI spec has 14 security findings and 3 match active HackerOne reports , your agent creates the tickets before the bounty payout

Build the capability set

Each Connector adds new actions and data without changing how you work.

Browse Connectors

01 10 capabilities

Equixly

Automate API security testing via Equixly. manage target services, trigger autonomous AI pentests, and audit vulnerability findings directly from any AI agent.

View Connector

02 10 capabilities

Beagle Security

Automate security testing via Beagle Security. list projects, start tests, and retrieve results directly from any AI agent.

View Connector

03 10 capabilities

StackHawk

Connect your AI to the StackHawk DAST platform. Run automated security scans, triage alerts seamlessly, and find vulnerabilities effortlessly.

View Connector

04 10 capabilities

HCL AppScan

Manage security scans and vulnerabilities with HCL AppScan. track issues and audit applications via AI.

View Connector

05 10 capabilities

Contrast Security

Equip your AI with Contrast Security AppSec data to monitor applications and hunt critical vulnerabilities directly via chat.

View Connector

06 10 capabilities

Veracode

Bring Veracode AppSec to your AI. Analyze source code flaws, extract application profiles, and track vulnerabilities conversationaly.

View Connector

Bring your own AI

Change the model, client or framework. Keep 42Crunch connected.

Claude
ChatGPT
Gemini
Cursor
VS Code
Windsurf
ZCode
Cline
Zed
Continue
Kiro
Roo Code
Zencoder
Goose
Void
Augment Code
Amp
Qodo
Tabnine
Pieces
Sourcegraph Cody
JetBrains
Warp
Amazon Q
Antigravity
BoltAI
Raycast
Jan
LM Studio
AnythingLLM
Open WebUI
Msty
Cherry Studio
LibreChat
TypingMind
Chorus
5ire
n8n
LangChain
LlamaIndex
CrewAI
Vercel AI SDK

Before you connect

Questions about 42Crunch.

The practical details behind the request, access and result.

Can I use 42Crunch MCP to find my API security scores?

Yes, you can see security scores for specific APIs and entire collections. Your agent can pull these scores instantly to give you a snapshot of your security health.

How do I get a security audit report through the 42Crunch MCP?

Just ask your agent to trigger an audit and then fetch the report. It will pull the full details of design risks and vulnerabilities directly into the chat.

Can I import OpenAPI specs into my 42Crunch account using an AI agent?

Yes, the Connector allows you to import definitions directly into your collections. This lets you start security testing as soon as you finish writing your spec.

Does 42Crunch MCP support both static and dynamic scans?

It does. You can trigger static audits for your specifications and view reports for dynamic conformance scans against your live APIs.

Can I manage my API collections with this Connector?

Yes, you can list, view, and delete collections and their definitions. It makes it easy to organize your environment and keep it clean.

Is 42Crunch MCP good for DevSecOps teams?

It is built for them. It automates the feedback loop between code updates and security results, helping teams catch vulnerabilities earlier in the lifecycle.

Can my AI agent explain the vulnerabilities found in a 42Crunch audit?

Yes. After retrieving an audit report using your agent, you can ask the agent to act as a DevSecOps engineer. It can break down exactly why you received a low score, explain specific OWASP findings, and write the YAML or JSON patch needed to fix your OpenAPI spec instantly.

How do I test a new API update before merging?

Simply paste your updated OpenAPI definitions into your AI agent's chat context. Ask the agent to import the new API definition into a staging collection. The platform will automatically run a static security audit upon import, and your agent can report back the new security score before you hit merge.

What is the difference between static audits and dynamic conformance scans?

Audits strictly verify the design of your JSON/YAML contract against security best practices without making network calls. Scans, however, send live HTTP traffic against your implemented endpoint to make sure your back-end truly conforms to what you wrote. Your agent can retrieve both reports for side-by-side comparison.

One connection away

Give your agent a direct line to 42Crunch.

Connect 42Crunch once. Keep it beside 5,900+ managed Connectors when the next task needs more.

Explore every Connector No credit card required · Free tier available

42Crunch for Automated API Security Audits

You get automated API security governance directly inside your AI chat.

Instant audit after a spec update

Security health overview for platform teams

Identifying production behavior flaws

Get audit report

List scans

Get scan report

Trigger audit

Delete api

Get api

Get collection

Import api

List apis

List collections

Open Connectors

Add the URL

Turn it on in chat

Open MCP settings

Add the URL

Save and start

Open MCP Settings

Add the server config

Save the file

Start using 42Crunch

Create MCP config

Add the server config

Enable Agent mode

Start using 42Crunch

Open MCP Settings

Add the server

Save and reload

Start using 42Crunch

Open Cline MCP Settings

Add remote server

Enable the server

Start using 42Crunch

Install Claude Code

Add the Connector

Verify the connection

Start using 42Crunch

DevSecOps Engineer

Platform Team

Backend Developer

Find API Vulnerabilities First Using MCP

Equixly

Beagle Security

StackHawk

HCL AppScan

Contrast Security

Veracode

Give your agent a direct line to 42Crunch.