Security & Testing MCP Servers

pcap magic endian, bytes discarded

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server

PE MZ/PE signature, bytes discarded

Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools

Public phishing feed: suspicious/confirmed phishing URLs detected hourly. No auth, CC0.

PhoneInfoga - International Phone Number OSINT

FIRST.org EPSS (Exploit Prediction Scoring System) MCP.

MalwareBazaar MCP — abuse.ch malware sample database (free, key required)

OSV.dev — Google's open-source vulnerability database

Password strength analysis MCP.

Sanctions Screening MCP — screen people, companies, vessels, and aircraft

Discover Playwright workflows, start runs, and inspect results in Playrunner Cloud.

Approved test intent, reviewed Playwright automation and run evidence, inside your editor.

PolicyOracle - 12 policy lifecycle tools: drafting, approval, distribution, attestation.

Poly1305 tag length, input discarded

MCP server for Proofpoint Essentials -- MSP org, domain, user, licensing, and reporting management.

QRNG-seeded random bytes, seeds, and ML-KEM-768 keys with signed provenance receipts.

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

Reverse-engineering evidence from a running Windows process, not the binary on disk.

Scan a live web page for WCAG 2.1/2.2 AA issues with axe-core: score, grade, failing rules.