Security & Testing MCP Servers for HTTP / API

DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.

Verify a vuln report's file/line/function claims against a real GitHub repo.

Prompt-injection scanning and safe webpage fetching for AI agents reading untrusted content.

Ubuntu security: USNs per CVE, patched versions. Register in-session — free testnet funds.

PreClick scans links for threats and confirms intent match with high accuracy before agents click.

MCP server for Security

Pay-per-call OSINT for AI agents: username + email recon in USDC on Base via x402.

Pay-per-call safety checks for AI agents: screen a crypto address or URL before you transact.

Check if an MCP server tool changed or hides injection patterns before you trust it.

EU AI Act compliance MCP server — risk classification (with article citations), role-based obligation list…

AlienVault OTX MCP — Open Threat Exchange (free with key)

On-chain provenance lookup for AnchorRegistry. Resolve AR-IDs, hashes, and full trees. Authless.

Apiiro Application Security Posture Management (ASPM) tools for AI coding assistants.

Argon2d encoded shape, input discarded

Argon2i encoded shape, input discarded

Zero-install remote MCP server for proof-of-existence file attestation.

bcrypt $2 hash shape, value discarded

Argues against a security finding or a draft bug bounty report before you submit it.

NAIC AI model bulletin adoption by state, with citations. Insurance AI compliance data.

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

Censys MCP — internet-scan search over the Censys Platform API (censys.com)