# Test API authorization flows with Hadrian

> Lets an agent exercise REST, GraphQL, and gRPC authorization paths with YAML-defined role tests so BOLA, BFLA, broken authentication, and related API flaws are caught before release.

- Skill: `agentskillexchange/test-api-authorization-flows-with-hadrian` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/test-api-authorization-flows-with-hadrian`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/test-api-authorization-flows-with-hadrian/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/test-api-authorization-flows-with-hadrian

---


# Test API authorization flows with Hadrian

Lets an agent exercise REST, GraphQL, and gRPC authorization paths with YAML-defined role tests so BOLA, BFLA, broken authentication, and related API flaws are caught before release.

## Prerequisites

Go or a prebuilt Hadrian binary, plus a target API definition or endpoint and role/auth configuration files such as roles.yaml and auth.yaml.

## Installation

Use the upstream install or setup path that matches your environment:
- go install github.com/praetorian-inc/hadrian/cmd/hadrian@latest
- git clone https://github.com/praetorian-inc/hadrian.git
- make build
- make build # Build the binary

Requirements and caveats from upstream:
- # AI-powered triage with OpenAI (requires OPENAI_API_KEY)
- # AI-powered triage with Anthropic (requires ANTHROPIC_API_KEY)
- # AI-assisted attack planning (requires OPENAI_API_KEY, or use --planner-provider for Anthropic/Ollama)

Basic usage or getting-started notes:
- bash
- ### Download Pre-Built Binary
- Download the latest binary for your platform from the [Releases](https://github.com/praetorian-inc/hadrian/releases) page.

- Source: https://github.com/praetorian-inc/hadrian
- Extracted from upstream docs: https://raw.githubusercontent.com/praetorian-inc/hadrian/HEAD/README.md

## Documentation

- https://github.com/praetorian-inc/hadrian#readme

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/hadrian-api-authorization-security-testing/)