About

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.

Components

No components declared.

Declaration (derived by the registry from the source — the publisher wrote no manifest)

• undeclared Undeclared: No components could be derived from plugin.json — what this plugin can do is undeclared; it runs only in sandbox/Playground until the publisher confirms a declaration

Undeclared — sandbox / Playground only until the publisher confirms

• No components could be derived from plugin.json — what this plugin can do is undeclared; it runs only in sandbox/Playground until the publisher confirms a declaration

Derived from: plugin.json in 42crunch-ai/claude-plugins

Validation

✓ No validation issues

Files hashed

Use this skill — no import, no export

In Claude Code, once:

Then install by name:

Or ask any connected agent:

Attestation

The registry signs the hash of the source at the pinned ref. If the source changes after pinning, the hash fails and integrating hosts refuse it.

Record