Security & Testing MCP Servers for HTTP / API

Verify npm packages before your AI agent installs them: hallucinations, advisories, API drift.

AI-powered test automation: run tests, analyze failures, query results across mabl workspaces.

Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

Paid remote MCP for server intake risk reports, tool review, approvals, and readiness.

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

MITRE CWE API MCP.

Mozark's MCP server for AI-powered app testing: device access, test automation, and QA insights.

MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…

Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.

Password strength scoring with entropy, crack time estimation, common password detection. x402.

PEM fence check, key discarded

PGP armor fence check, key discarded

Phoenix/rebrand relink detection: links a debarred principal to a newly-formed business entity.

Detect PII in text: emails, phones, SSNs, credit cards, IPs. Regex + Luhn. x402.

AbuseIPDB MCP — wraps AbuseIPDB v2 API (api.abuseipdb.com/api/v2)

GreyNoise Community MCP — internet scanner classification (free tier with key)

MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.

PhishTank MCP — wraps PhishTank API (checkurl.phishtank.com)

Security Feeds MCP.

SecurityTrails MCP — wraps SecurityTrails API (securitytrails.com)

ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)