Security & Testing MCP Servers

Paid remote MCP for server intake risk reports, tool review, approvals, and readiness.

Is this dependency current, licensed, deprecated, or already carrying a CVE?

Remote MCP for tool license checks, vendor policy review, alternatives, and license receipts.

Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.

Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.

Mozark's MCP server for AI-powered app testing: device access, test automation, and QA insights.

MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…

Zero-Trust MCP gateway securing internal database tools behind an API key firewall.

Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.…

Password strength scoring with entropy, crack time estimation, common password detection. x402.

PEM fence check, key discarded

PGP armor fence check, key discarded

Phoenix/rebrand relink detection: links a debarred principal to a newly-formed business entity.

PhoneInfoga - International Phone Number OSINT

Detect PII in text: emails, phones, SSNs, credit cards, IPs. Regex + Luhn. x402.

AbuseIPDB MCP — wraps AbuseIPDB v2 API (api.abuseipdb.com/api/v2)

Shodan InternetDB MCP — wraps Shodan InternetDB (internetdb.shodan.io)

urlscan.io MCP.

VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

PolicyOracle - 12 policy lifecycle tools: drafting, approval, distribution, attestation.

Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.