Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted dev…
Plugins
aikido
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
What it does
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
Get started
In Claude Code, open /plugin > Discover and search for this plugin, or run the command below in the Claude Code prompt. Review the publisher requirements before connecting accounts or granting access.
/plugin install aikido@claude-plugins-officialPublisher-documented command. Review the linked setup guide before running it.
Setup takes place on the publisher’s site. Some tools require accounts, API keys, a compatible host or paid services. Review permissions before connecting.
Plugin components
Not yet inspected. Check the original project for included skills, commands, agents and integrations.
Sources & verification
Listed in the official Claude Code marketplace; source location and installation syntax supplied by the marketplace. Installation and runtime behavior not tested.
Source checked 2026-10-14. This is not a security certification or a guarantee that installation will work in your environment.
Explore related tools
Selected by shared tasks
Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent.
Personalized AWS guidance built on patterns from 350,000+ startups. Get architecture, cost, and security recommendations matched to your stage, from day-one account setup to production-ready infrastructure. Migrate to AWS from Azure, GCP…
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings…