Security & Testing MCP Servers

RegisterOracle - 10-tool DORA Art.28 register: ICT third-party, contracts, criticality.

Inspect a public site's tracking signals, grade consent evidence, and get remediation playbooks.

Free scam checks for links, wallets, emails, and breach exposure. No signup.

Trust verdicts on repos, models, VS Code and Docker Desktop extensions and agent skills.

Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.

MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.

AI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control

S/MIME PKCS7 fence, body discarded

sanctions.io MCP — wraps the sanctions.io Screening API (api.sanctions.io)

No-key MCP: audit/certify MCPs, signed trust history; join Gold Rush Town & build with your LLM.

Scam and phishing detection for AI agents: safe/warn/danger verdicts for URLs and messages.

Check a suspicious email, SMS, WhatsApp message or link for scam signals (Netherlands, Belgium).

AI-powered scam and threat verification for phone numbers, URLs, texts, and emails.

OFAC and global sanctions screening: crypto addresses, emails, websites, IDs, countries, VPN, geo

Sanctions screening for AI agents: check a name against OFAC and EU lists. Free during launch.

Stateless PII redaction over MCP/REST. Free ≤1000 words or $0.01/call; file upload supported.

scrypt N cost band, value discarded

Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.