Security & Testing MCP Servers for OpenAI Agents SDK

Shared app-testing runbook: read the plan, record results per platform, raise and fix issues.

Drive real Android & iOS devices and web browsers from natural language for mobile + web QA.

Betterleaks Cloud - GitHub, Git, S3, Dir Secret Scanner

Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.

Pre-launch website QA in 60s via real Chromium. $3/check; agents can pay in USDC (x402).

CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.

EU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected.

Australian AI governance framework mapped to the Privacy Act and sector laws your AI use triggers.

MCP server for Bitdefender GravityZone's JSON-RPC API.

CISA advisories & ICS alerts: new CVEs, remediation. Register in-session — free testnet funds.

AI regulation, data protection and compliance notes from CSIDIA, plus its capability catalogue.

CVE advisories: high/critical NVD vulns, daily digest. Register in-session — free testnet funds.

Cyber Essentials Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner

Bitcoin-anchored, tamper-evident audit-permanence layer for AI agents, FRE 902(13)/(14)-shaped.

Agents that test your web and mobile app like real users, on every pull request.

Inspection, steganography and forensics API for files and images. Bitcoin pay-per-use.

Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS

MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

Read-only MCP server for Inforcer M365 baseline governance, plus assessment and report runs.

Read-only risk tools: token screen, contract source, wallet. $0.10 USDC on Base.