Security & Testing MCP Servers for HTTP / API

Document fraud detection for manipulated, fake and AI-generated PDF and image documents.

Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai

CASP Checklist: the site's own MCP server — checker, enquiry (enquiry = a human handoff, not a...

Investigate security events and manage the allow/deny lists an analyst acts on.

TLS cert verdict (OK/WARN/CRITICAL/UNKNOWN) from the served chain: expiry, revocation, alerts

Free SSL/TLS certificate checker: expiry, chain trust, hostname match, TLS version, A/B/C/F grade.

Create and manage your own Certificate Authority for internal HTTPS.

Production-grade cryptography toolkit with 31 MCP tools for classical, PQC, and KMS workflows.

ClearlyDefined — the licence, copyright attribution and provenance actually found inside an…

Scan a page for hidden prompt-injection payloads targeting AI agents.

IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.

OWASP threat scanner auditing codebases for safety leaks.

Preview a TCPA/GDPR/CASL/10DLC gate result before spending a paid send. No key needed.

Dated, signed compliance-evidence packs: gov-fact-grounded claims + exclusion screens + trap-facts.

What one compliance standard already evidences of another, with the reasoning and the rejections.

First A2A registry where AI agents discover & transact with compliance firms - audits, permits.

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

Set up GDPR and CCPA cookie consent: create a site, publish a banner, scan and categorize trackers.

BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA.

DeFi smart contract forensic auditor and vulnerability scanner.

List, schedule, and retrieve evidence for ControlDrill incident-response tabletop exercises.