Security & Testing MCP Servers

Read-only MCP server for Inforcer M365 baseline governance, plus assessment and report runs.

Check an IP or your own network exit before using ChatGPT, Claude, Gemini or Meta Muse.

Is this name on Japan's MOF asset-freeze list? Hosted, list-change history kept. Reference only.

check-package: block malicious npm/PyPI deps before your AI agent installs them. Free, no key.

k-anonymity 5-hex prefix, value discarded

Qualified eIDAS RFC 3161 timestamping for AI workflow provenance. SIGNIUS/IDnow backbone.

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

Scan URLs or HTML for WCAG 2.2 violations. 75-rule manifest, weighted score, shareable reports.

Cryptographically anchored evidence for agents: verified run receipts, proof-gated settlement.

LEEF attr count, line discarded

Compliance lint for AI, scraping, and privacy law. Cited findings in 200 or more jurisdictions.

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.

LM hash 16-hex shape, value discarded

Send API keys and private files to someone else's agent, end-to-end encrypted.

Anthropic logs audit filter and cybersecurity threat analyzer.

NIST 800-171 controls and 800-171A objectives, crosswalks, exact SPRS scoring, POA&M generation.

2,029 DISA STIG rules with official check/fix text, CCI mappings, and .ckl checklist export.

MCP server for Mailprotector — customers, domains, users, quarantine, allow/block rules for MSPs.

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.