Securing AI Agents and MCPs: Akto Platform Overview. Save my Spot

Find your API Security Test

Jumpstart your API Security testing with our pre-built YAML tests. A library of 100+ API Security tests and growing everyday

Search…

Unnecessary HTTP Methods (UHM)

Clear filter

unnecessary-http-methods

Access Control Bypass by changing request method to HEAD

Many authentication mechanisms only limit access to the most common HTTP methods, thus allowing unauthorized access to restricted resources by other HTTP methods.

unnecessary-http-methods

Access Control Bypass by changing request method to HEAD

Many authentication mechanisms only limit access to the most common HTTP methods, thus allowing unauthorized access to restricted resources by other HTTP methods.

unnecessary-http-methods

Access Control Bypass by changing request method to an arbitrary value

Many authentication mechanisms only limit access to the most common HTTP methods, thus allowing unauthorized access to restricted resources by other HTTP methods.

unnecessary-http-methods

Access Control Bypass by changing request method to an arbitrary value

Many authentication mechanisms only limit access to the most common HTTP methods, thus allowing unauthorized access to restricted resources by other HTTP methods.

unnecessary-http-methods

TRACE Method Vulnerability Test

The endpoint appears to accept requests with TRACE HTTP Method. The original request was replayed by replacing the method value with TRACE. The application responded with 2XX success code.

unnecessary-http-methods

TRACE Method Vulnerability Test

The endpoint appears to accept requests with TRACE HTTP Method. The original request was replayed by replacing the method value with TRACE. The application responded with 2XX success code.

unnecessary-http-methods

TRACK Method Vulnerability Test

The endpoint appears to accept requests with TRACK HTTP Method. The original request was replayed by replacing the method value with TRACK. The application responded with 2XX success code.

unnecessary-http-methods

TRACK Method Vulnerability Test

The endpoint appears to accept requests with TRACK HTTP Method. The original request was replayed by replacing the method value with TRACK. The application responded with 2XX success code.

Read our blog

Product Updates

4.5 minutes

Introducing Akto’s Agentic Security Platform: Agents are cool. Attacks are not.

Agentic Security

5 Minutes

Best AI Security Vendors & Companies to Know in 2025