Runs an explicit permission matrix against REST APIs and MCP servers. This fork adds a Burp history importer and experimental authorization probes.
Maintained by unrandoms, derived from kabiri-labs/overstep.
A successful HTTP status alone does not establish an authorization vulnerability. Probe findings need confirmation against the expected access policy.
This documentation update does not certify all inherited features. The archived reference describes the original ecosystem; its package names and release links may target upstream rather than this fork.
See CREDITS.md for the distinction between the original implementation and this fork's adaptations. Original licenses and copyright notices remain in the repository.