`asvs_requirements`

Pack: owasp · Endpoint: https://gateway.pipeworx.io/owasp/mcp

Testable security requirements from OWASP ASVS 5.0, each with its verification id (e.g. “V6.2.1”), section, level (L1/L2/L3) and text — the citable controls layer. Filter by chapter, level and/or keyword. Use to ground a control (“what does ASVS require for password storage?”).

Parameters

Name	Type	Required	Description
`chapter`	string	no	Chapter id like “V6” (Authentication). Omit to search all chapters.
`level`	number	no	Assurance level: 1 (essential), 2 (standard), 3 (advanced). Returns requirements applicable at or below this level.
`query`	string	no	Keyword filter on requirement text, e.g. “password”, “TLS”, “CSRF”.
`limit`	number	no	Max requirements to return (default 40, max 100).

Example call

Arguments

{
  "chapter": "V6",
  "level": 1
}

curl

curl -X POST https://gateway.pipeworx.io/owasp/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"asvs_requirements","arguments":{"chapter":"V6","level":1}}}'

TypeScript (@pipeworx/sdk)

import { Pipeworx } from '@pipeworx/sdk';
const pipeworx = new Pipeworx();

const result = await pipeworx.call('asvs_requirements', {
  "chapter": "V6",
  "level": 1
});

More examples

{
  "query": "password",
  "level": 2,
  "limit": 20
}

Connect

Add this to your MCP client config, or use one-click install buttons:

{
  "mcpServers": {
    "owasp": {
      "url": "https://gateway.pipeworx.io/owasp/mcp"
    }
  }
}

See Getting Started for client-specific install steps.

asvs_requirements