Security & Testing MCP Servers

DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.

Deterministic test data from a .tdc config, generated locally by the TDCv2 engine.

Positive-security for apps, APIs, LLMs and edge, plus fraud scoring and identity/AML screening.

TLS security grades from SSL Labs. No key required.

Local-first MCP security scanner and CLI for AI-generated applications.

Generate realistic, relational synthetic JSON test data from templates, via the JsonFabrica API.

Summarize local license evidence and uncertainty without returning package names, license text,...

Count secret-like patterns in bounded local files without returning values, keys, paths,...

Input/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets.

MCP plugin to control Android devices via ADB for automation, testing, and agent integration

MCP server that scans other MCP servers for prompt injection, data exfiltration, and privilege escalation. Add to your .mcp.json and let

Doppler API: projects, configs, secrets.

MCP server for GreyNoise: IP noise classification, tags. Free key.

Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.

Dummy JSON test data. No key required.

Scans agent code for untrusted input poisoning persistent cross-session memory

Interactive Ghidra views in your AI client: decompile, rename, and navigate a binary.

Bitwarden public API: members, collections, groups, event logs.

Cut 95% of framework noise and token bloat from error logs for AI agents.

MCP server v6 — tools consolidated by domain (flow_query, flow_relationships, archive_flow, steps_query, steps_base_batch)

Infostealer breach intelligence from Hudson Rock. No key required.