Security & Testing MCP Servers

Make a coding agent prove it: run the repo's real tests, typecheck and lint before it says done.

Local-first visual regression for AI agents: verdicts, diff images, explain_snapshot. No API key.

Pull one-time .env links from stubs.talix.app into a project. Returns key names, never values.

A chaos-engineering and resilience-testing toolkit for Model Context Protocol servers.

Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

Find leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions

Check from a screenshot that text is really visible to users. Local, offline OCR.

Is this product version FIPS 140-3 validated, in NIST's queue, or expiring? From NIST CMVP data.

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

MCP server that wraps Google's OSV-Scanner to scan Java projects for known vulnerabilities

Unified MCP server for the 12-spec Kinetic Gain Suite + DefenseTech 6-pack — 75 governance tools.

MCP server for Malcolm (Zeek/Suricata/Arkime/OpenSearch): threat-hunting access for AI agents

Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents

Lets an AI agent hand a secret to a person as a one-time link, with no way to read it back.

Autonomous AI pentesting with 200+ tools, exploit chaining, PoC validation, and credential-safe MCP server

Signed, offline-verifiable safety scores for the MCP servers, packages & tools an agent connects to

Steganography analysis MCP server — 128 tools, 17 categories. Image steganalysis, JPEG/F5/JSteg detection, audio steganography, video

Durable file-based OpenUI artifacts over MCP for Nuwax.

Verify a SCITT receipt under a trust root you hold — offline, no backend, no key, no network

Score agent manifests, generate CI workflows, and pull Clarx scan findings into your IDE.

MCP server for managing Allure TestOps tests, launches, plans, defects, and metadata.