Security & Testing MCP Servers for OpenAI Agents SDK

Kill switch + spend guard for AI agents that spend money, across every wallet vendor at once.

AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel.

Local privacy-first tools: redact secrets, decode JWTs, compare LLM costs. No network calls.

Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).

Read-only Wazuh SIEM/XDR control CLI with an MCP adapter

Reputation of IPs, domains, URLs, hashes, emails and phones; CVE lookups; prompt-injection scans

Allure TestOps MCP — projects, launches, test cases, test results via REST API.

Verify an npm package before you install it: advisories, install scripts, typosquats, provenance.

Zero-knowledge secrets manager — local crypto-plane MCP server: decrypts and injects secrets.

BugHerd API v2 integration — 37 tools for projects, tasks, comments, and webhooks.

Compliance evidence from AIops audit trails: HIPAA/PCI/SOC2/GDPR, OSCAL export, 19 tools.

Draft risk-based test plans and assess automated test coverage against product risks with RiskRover.

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

Codex-native codebase intelligence context compiler and query-only MCP server.

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

ISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows.

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

Governs what AI agents do: tool calls, SQL, commands, files checked against policy before they run.

Zephyr Scale on self-hosted Jira Server/DC: test cases, cycles, executions, plans and attachments

MCP server security scanner — score configurations on permissions, data sensitivity, blast radius