Security & Testing MCP Servers

Forensic image analyzer detecting facial and visual anomalies.

Media forensic analyzer auditing audio and video authenticity.

Acoustic deepfake detector and voice biometrics auditor.

Daily data feeds MCP: CISA KEV+EPSS, SEC Form 4, 10-K sections, domain ranks. Keys $19/mo.

Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.

Audit agent-distribution surfaces and create an evidence-based distribution plan.

Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

Deterministic pre-execution audit for trading agents. PASS/WAIT/FAIL, reproducible verdict_hash.

DNS & email security scanner — 51 tools for SPF, DMARC, DKIM, DNSSEC, SSL, and more.

MCP server for DNSFilter's DNS security/filtering API.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

WHOIS, DNS, SSL, IP geo for security forensics and OSINT — separate from SEO.

Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).

DVERA drives CT verification of mission-critical C/C++: setup, analysis, tests, coverage.

Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.

Capture a web source, or seal a hash you hold, into a signed receipt anyone can verify offline.

Encrypted env variables manager with zero-leak capabilities.

Tamper-evident evidence log: signed heads, proofs, and recording salted digests of your records.

Screen a business for federal exclusions & sanctions: OFAC SDN, HHS-OIG LEIE, SAM.gov debarment.