Security & Testing MCP Servers for HTTP / API

CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.

Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats

Polish phone number lookup: who called, spam and scam checks, UKE DNO registry, CERT phishing stats

NVD MCP — wraps the NIST National Vulnerability Database API.

Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.

Drive OctoPerf load testing from any AI agent: import, edit, validate, run scenarios, read metrics.

Screen names against US, UN, EU, UK, Canadian and Swiss sanctions and export-control lists. Free.

Governance maturity assessment, compliance gap analysis, and evidence-linked briefs for AI agents.

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT.

OSV.dev (Open Source Vulnerabilities) MCP.

Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.

AI website audit: security, SEO, performance, UX and accessibility checks with actionable fixes.

PBKDF2 hex length, input discarded

pcap magic endian, bytes discarded

PE MZ/PE signature, bytes discarded

Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.

Public phishing feed: suspicious/confirmed phishing URLs detected hourly. No auth, CC0.

Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.

FIRST.org EPSS (Exploit Prediction Scoring System) MCP.