Security & Testing MCP Servers for HTTP / API

Add a cookie consent banner that blocks trackers before consent and records proof of consent.

Enrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.

crt.sh — Certificate Transparency log search

CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.

Validated API and app vulnerability findings with remediation guidance.

CycloneDX component count, body discarded

Blockchain SSN for AI agents. MCP gateway that blocks at the point of action, tamper evident audit.

Who to notify after a data breach and by what date: all US states, SEC, HIPAA, GDPR, UK. Sourced.

Live trust signals for domains & packages: age, registrar, typosquat resemblance.

Forensic image analyzer detecting facial and visual anomalies.

Media forensic analyzer auditing audio and video authenticity.

Acoustic deepfake detector and voice biometrics auditor.

Daily data feeds MCP: CISA KEV+EPSS, SEC Form 4, 10-K sections, domain ranks. Keys $19/mo.

Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.

Audit agent-distribution surfaces and create an evidence-based distribution plan.

Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

Deterministic pre-execution audit for trading agents. PASS/WAIT/FAIL, reproducible verdict_hash.

DNS & email security scanner — 51 tools for SPF, DMARC, DKIM, DNSSEC, SSL, and more.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.