CodexPluginStats
← Claude plugins
Security

42crunch-api-security-testing

42Crunch v1.5.5

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-pow...

Create a free account to save this plugin.

From the developer

License

Apache 2.0

Works with

Claude Code

Description

From the marketplace listing

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.

Claude marketplace listing ↗ Source repository ↗ Website ↗

What changed

Oct 27, 2026 · 18:00 UTC

Changed

Web → Id: “wf.69fa2507afbc391a0aba853f” → “directoryPlugin.4cd117e2-0a08-46af-9fc7-2da86474c15b”

Changed

Web → Anthropic verified: “false” → “true”

Changed

Web → Made by: “42Crunch” → “not provided”

Changed

Web → Subheading: “Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabiliti...” → “Catch API security issues during development: audit, scan, remediate, validate with AI guardrails in Claude Code.”

View comparison →

Oct 3, 2026 · 22:13 UTC

Added

Catalogs updated; open the comparison for details.

View comparison →

Keywords

Files & skills

42crunch-api-security-testing · catalog manifest

Saved declaration

{
  "name": "42crunch-api-security-testing",
  "author": {
    "name": "42Crunch"
  },
  "source": {
    "ref": "v1.5.5",
    "sha": "faf5305385de8afed9468904e8639be737aff39e",
    "url": "https://github.com/42Crunch-AI/claude-plugins.git",
    "path": "plugins/api-security-testing",
    "source": "git-subdir"
  },
  "category": "security",
  "homepage": "https://42crunch.com",
  "description": "Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment."
}
api-security-testing · catalog manifest

Saved declaration

{
  "name": "api-security-testing",
  "author": {
    "url": "https://github.com/42Crunch",
    "name": "42Crunch",
    "email": "support@42crunch.com"
  },
  "license": "Apache 2.0",
  "version": "1.5.5",
  "category": "security",
  "homepage": "https://42crunch.com",
  "keywords": [
    "openapi",
    "api-security",
    "audit",
    "scan",
    "remediation",
    "vulnerability",
    "compliance",
    "owasp",
    "bola",
    "bfla",
    "ai",
    "devsecops",
    "42crunch"
  ],
  "repository": "https://github.com/42Crunch-AI/claude-plugins",
  "description": "Catch API security issues during development: audit, scan, remediate, validate with AI guardrails in Claude Code."
}

plugin.json observed Nov 6, 2026 · 10:39 UTC. Manifest source ↗

Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.

Installation instructions

Official

/plugin install 42crunch-api-security-testing@claude-plugins-official

Claude Code installation documentation

Technical details
Sources
Claude Marketplace · Official
First seen
Oct 3, 2026 · 21:29 UTC
Last seen
Nov 9, 2026 · 00:00 UTC
Latest observed change
Oct 27, 2026 · 18:00 UTC
Collection status
Listed
Reported installs
2,298
Source badge
Anthropic verified, as displayed by Claude Marketplace.

Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.

Download plugin data (JSON)

Plugin history: served from cache. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.