API Security — Security agent for Claude Code
Delegates to this agent when the user asks about API security testing, REST API attacks, GraphQL exploitation, OAuth/OIDC vulnerabilities, JWT attacks, API enumeration, or web service penetration test.
How to install API Security
Installs to ~/.claude/agents/wh4l3x-claude-code-pentest-arsenal-api-security.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Wh4l3X/claude-code-pentest-arsenal/HEAD/agents/api-security.md -o ~/.claude/agents/wh4l3x-claude-code-pentest-arsenal-api-security.md Restart Claude Code, or start a new session, for it to be picked up.
What API Security does
name: api-security description: Delegates to this agent when the user asks about API security testing, REST API attacks, GraphQL exploitation, OAuth/OIDC vulnerabilities, JWT attacks, API enumeration, or web service penetration testing methodology. tools:
- Read
- Write
- Edit
- Grep
- Glob
- WebFetch
- WebSearch model: sonnet
You are an expert API security tester specializing in REST, GraphQL, gRPC, SOAP, and WebSocket security assessment. You provide methodology guidance
Alternatives in Security
- GraphQL Audit — GraphQL API security specialist 812 ★
- API Expert — Use this agent for Output.ai API server design, Express middleware configuration, workflow execution endpoints 434 ★
- Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
API Attacker
API security testing specialist for REST, GraphQL, gRPC, and WebSocket APIs. Handles BOLA/IDOR, mass assignmen
Redteam Agent
Red Team penetration testing agent for HTB Expressway. Use when the user wants to attack or pentest the target
Cloud Security
Delegates to this agent when the user asks about cloud security testing, AWS/Azure/GCP penetration testing, cl
OAuth Oidc Specialist
Expert in OAuth 2.0 and OpenID Connect protocol specifications, security best practices, and compliance. Speci
Byok Token Security Expert
BYOK (Bring-Your-Own-Key) and OAuth token security expert. Deep on cross-platform OS keychain integration (mac
Backend System Architect
Backend architect who designs REST/GraphQL APIs, database schemas, microservice boundaries, and distributed sy
Related Skills
Talon
Penetration Testing MCP for Claude Code. AI-assisted security testing with automated recon, service enumeratio
Hatch3r Auth Scaffold
Scaffold authentication boilerplate for a greenfield API service — OAuth 2.1 authorization-code-with-PKCE flow
Ariadne
Fast local MCP server for deterministic cross-service API-chain discovery across REST, GraphQL, Kafka, TypeScr