---
title: ToolRouter — Agent Use Case Guide
description: Step-by-step guide for completing a task with a specific AI agent using ToolRouter.
url: https://toolrouter.com/tools/pentest/use-cases/test-api-security/openclaw
---
# How to Test API Security with OpenClaw

OpenClaw runs penetration tests as automated, systematic security assessments that cover your entire web application attack surface in one sweep. Scan for injection flaws, authentication weaknesses, misconfigurations, and information disclosure across all your endpoints in a single session. Its automated approach is ideal for establishing regular security scanning cadences and generating consistent vulnerability reports that can be tracked over time.

## Setup

openclaw mcp add toolrouter -- npx -y toolrouter-mcp

## Steps

1. Connect ToolRouter: openclaw mcp add toolrouter -- npx -y toolrouter-mcp
2. Ask OpenClaw: "Test the security of my API endpoints"
3. OpenClaw probes your API for vulnerabilities
4. Review findings by severity and category
5. Fix critical issues and verify with re-testing

## Example Prompt

```
Run security tests against my API at https://api.staging.myapp.com. Test authentication, input validation, and authorization boundaries.
```

## Tips

- Test APIs both with and without authentication tokens to check access control
- Include edge cases like expired tokens, malformed requests, and boundary values
- Run API security tests as part of your CI/CD pipeline for continuous protection
