Security & Testing MCP Servers for HTTP / API

Verify URLs, payees, and messages before acting: red/yellow/green trust verdicts for agents.

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

Feodo Tracker MCP — botnet C&C IP blocklist from abuse.ch.

Scan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions.

Real-time Python package and vulnerability data for AI coding agents.

Signup fraud checks: score emails and IPs, look up IPs and manage your blocklist.

Guidance for answering vendor security questionnaires. Every result carries the page it came from.

Device intelligence for AI agents: Fingerprint events, smart signals, and API key management.

Flash and run real firmware on physical embedded dev boards from an AI agent, over MCP.

Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.

Automated API pentesting and structural fuzzing proxy.

Writes adversarial test suites for AI-built code. Your agent's test engineer.

Audits TLS/SSL handshake latency, HSTS headers, and HTTPS availability on the edge.

EU AI Act compliance for AI agents. Audit trail, delegation certs, and geospatial AI inference.

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

GOST R 34.11 hex length, input discarded

Pre-flight check for AI coding agents: hallucinated packages + hardcoded secrets. Free, no account.

Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.

Free C2PA 2.4 triage and reproducible official trust snapshot. No media, keys, or payment.

Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

Free no-key IP intelligence: geolocation, VPN detection, DNS, WHOIS, blacklists, breach checks