Security & Testing MCP Servers for HTTP / API

RegisterOracle - 10-tool DORA Art.28 register: ICT third-party, contracts, criticality.

Resemble AI: deepfake detection, media intelligence, and watermarking actions, plus docs tools.

ROT5 digit transform length, input discarded

No-key MCP: audit/certify MCPs, signed trust history; join Gold Rush Town & build with your LLM.

Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.

AI-powered scam and threat verification for phone numbers, URLs, texts, and emails.

MCP server for ScanMalware.com URL scanning, malware detection, and analysis.

OFAC and global sanctions screening: crypto addresses, emails, websites, IDs, countries, VPN, geo

Free IPv4 lookups against a distributed attacker-observation corpus.

Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.

Encrypted store for API keys and database URLs your code needs. Use them without reading them.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Cybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.

SHA-1 hex length, input discarded

SHA3-384 hex length, input discarded

Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.

SHAKE256 hex length band, input discarded

Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.

Defensive Shodan search and host intelligence MCP using customer-provided SHODAN_API_KEY for

Sigstore Rekor — the public transparency log for software signatures.

SipHash-4-8 hex length, input discarded