Skip to content

OWASP SAMM API

How do I query OWASP SAMM data over an API?

Point a GET request at api.theartofservice.com/api/agent/frameworks/OWASP SAMM, or add the MCP server to Claude Desktop or Cursor with the config below. You get 5 controls, 5 domains and every cross-framework mapping this standard carries. The free tier is 10 calls a day and needs no signup or API key.

5
Controls
5
Domains
161+
Mappings
Free
API Price

Add OWASP SAMM to Claude Desktop or Cursor in one config block

Copy this config into your MCP client to start querying OWASP SAMM data with AI:

{
  "mcpServers": {
    "compliance": {
      "url": "https://api.theartofservice.com/mcp"
    }
  }
}

No API key required for up to 10 calls/day. Works with Claude Desktop, Cursor, Windsurf, and any MCP-compatible client.

Three curl calls that return OWASP SAMM data

Get OWASP SAMM details

curl https://api.theartofservice.com/api/agent/frameworks/OWASP%20SAMM

List all OWASP SAMM controls

curl https://api.theartofservice.com/api/agent/frameworks/OWASP%20SAMM/controls

Map OWASP SAMM to another framework

curl "https://api.theartofservice.com/api/agent/cross-map?source=OWASP%20SAMM&target=SOC%202"

Install the Python or npm client

Python (Langchain)

pip install theartofservice-compliance

npm (MCP Server)

npx @theartofservice/compliance-mcp

Questions developers ask about the OWASP SAMM API

Is there an API for OWASP SAMM?▾
Yes. The Art of Service provides a REST API and MCP server with full OWASP SAMM data: 5 controls across 5 domains, plus cross-framework mappings to 686 other compliance frameworks. Free tier includes 10 calls/day with no signup.
How do I access OWASP SAMM controls programmatically?▾
Use the Compliance Intelligence API at api.theartofservice.com. Call GET /api/agent/frameworks/OWASP%20SAMM/controls to retrieve all 5 controls with codes, titles, and descriptions. Supports filtering by domain.
Can I map OWASP SAMM controls to other frameworks?▾
Yes. The API provides cross-framework mapping with 311K+ verified control-to-control mappings. Call GET /api/agent/cross-map?source=OWASP%20SAMM&target=TARGET to map OWASP SAMM controls to any of 686 frameworks.
Does the OWASP SAMM API work with Claude, ChatGPT, or Cursor?▾
Yes. The API is available as an MCP (Model Context Protocol) server. Add it to Claude Desktop, Cursor, or any MCP-compatible client with a single JSON config snippet. AI agents can then query OWASP SAMM data directly.
How much does the OWASP SAMM API cost?▾
Anonymous access is free (10 calls/day). Free accounts get 100 calls/month. Professional plans start at $149/month with 10,000 calls included. No credit card required for free tier.

What OWASP SAMM actually requires

The API returns the data. If you want the standard explained first, with its controls, domains and the frameworks it overlaps with, that is on the OWASP SAMM framework page.

OWASP SAMM controls, domains and mappings →
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .

Start using the OWASP SAMM API today

No signup required for 10 free API calls per day. Create a free account for 100 calls/month.

Try the APICreate Free Account