Security & Testing MCP Servers for HTTP / API

Verified AI-agent outcomes: secret scanning, JSON cleanup, dedupe, anomaly and schema checks.

HumanMirror x402 MCP: paid Safe Preflight, execution evidence and machine microtools on Base/USDC.

37 paid x402 MCP tools for OSINT, prediction markets, web intel, and agent security on Base USDC.

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

Agent-native security, trust, reliability, data and procurement tools for AI workflows.

Formally-verified injection/exfiltration detector for AI agents (MCP-02).

Free IP risk and geolocation lookup: proxy, VPN and datacenter detection. No API key.

Regression checks for Japanese order automations: six free cases, strict JSON scoring and CI gates.

Read-only EU sanctions preflight: screen names/IDs against EU list. Evidence, not a verdict.

Governance runtime for compliance: verified, human-approved writes to a tamper-evident record.

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

AWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.

Score an IP, email, phone, domain or device for fraud in one call, with the signals behind it.

Check breach exposure for your verified email and check locally computed password hash prefixes.

Regulatory compliance scanner validating SEC, FTC, and anti-spam rules.

Open-source licence risk checks for AI coding agents and dependency trees.

Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.

Load testing and synthetic monitoring platform: test with Playwright, Browser Bot, or Protocol Bots.

Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).