authmatrix

updated this year

Test an access-control matrix (role x endpoint) for IDOR/authz gaps

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.