`asvs_requirements`

Pack: owasp · Connect: https://pipeworx.io/mcp (see Connect below for a single-pack URL)

No MCP client? Call it directly: GET https://gateway.pipeworx.io/v1/tools/asvs_requirements for the schema, then POST the same URL with its arguments for the data.

Testable security requirements from OWASP ASVS 5.0, each with its verification id (e.g. “V6.2.1”), section, level (L1/L2/L3) and text — the citable controls layer. Filter by chapter, level and/or keyword. Use to ground a control (“what does ASVS require for password storage?”).

Parameters

Name	Type	Required	Description
`chapter`	string	no	Chapter id like “V6” (Authentication). Omit to search all chapters.
`level`	number	no	Assurance level: 1 (essential), 2 (standard), 3 (advanced). Returns requirements applicable at or below this level.
`query`	string	no	Keyword filter on requirement text, e.g. “password”, “TLS”, “CSRF”.
`limit`	number	no	Max requirements to return (default 40, max 100).

Example call

Arguments

{
  "chapter": "V6",
  "level": 1
}

curl

curl -X POST https://gateway.pipeworx.io/owasp/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"asvs_requirements","arguments":{"chapter":"V6","level":1}}}'

TypeScript (@pipeworx/sdk)

import { Pipeworx } from '@pipeworx/sdk';
const pipeworx = new Pipeworx();

const result = await pipeworx.call('asvs_requirements', {
  "chapter": "V6",
  "level": 1
});

More examples

{
  "query": "password",
  "level": 2,
  "limit": 20
}

Connect

Add this to your MCP client config — every tool in the catalog, including this one — or use one-click install buttons:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://pipeworx.io/mcp"
    }
  }
}

Connect to just the owasp pack

{
  "mcpServers": {
    "owasp": {
      "url": "https://gateway.pipeworx.io/owasp/mcp"
    }
  }
}

See Getting Started for client-specific install steps.

asvs_requirements