HTTPToolkit
Enables LLMs to automate API security testing, including replay, mutation, and auditing, on traffic captured by HTTPToolkit from mobile, desktop, and CLI applications.
This tool serves as an MCP (Multi-Client Protocol) server, allowing Large Language Models (LLMs) to drive HTTPToolkit for advanced automated API security testing. It's specifically designed for scenarios where HTTPToolkit excels, such as intercepting traffic from mobile apps, Electron applications, and CLI tools, offering capabilities like BOLA enumeration, authentication header stripping, privilege escalation testing, SSRF probes, and path traversal checks. It provides a robust framework with an audit trail, scope guards, and rate limiting, making it suitable for unattended operation, while complementing existing tools like Burp Suite for comprehensive security workflows.