`top10`

Pack: owasp · Connect: https://pipeworx.io/mcp (see Connect below for a single-pack URL)

No MCP client? Call it directly: GET https://gateway.pipeworx.io/v1/tools/top10 for the schema, then POST the same URL with its arguments for the data.

An OWASP Top 10 list with each category id, name, summary and the canonical URL. Lists: “web” (2021), “api” (2023), “llm” (LLM/GenAI applications 2025), “mobile” (2024). Use for awareness, mapping a finding to a category, or LLM-app threat modeling.

Parameters

Name	Type	Required	Description
`list`	string	no	Which Top 10 (default “web”).

Example call

Arguments

{
  "list": "web"
}

curl

curl -X POST https://gateway.pipeworx.io/owasp/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"top10","arguments":{"list":"web"}}}'

TypeScript (@pipeworx/sdk)

import { Pipeworx } from '@pipeworx/sdk';
const pipeworx = new Pipeworx();

const result = await pipeworx.call('top10', {
  "list": "web"
});

More examples

{
  "list": "llm"
}

Connect

Add this to your MCP client config — every tool in the catalog, including this one — or use one-click install buttons:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://pipeworx.io/mcp"
    }
  }
}

Connect to just the owasp pack

{
  "mcpServers": {
    "owasp": {
      "url": "https://gateway.pipeworx.io/owasp/mcp"
    }
  }
}

See Getting Started for client-specific install steps.

top10