Security & Testing MCP Servers for HTTP / API

IPQualityScore MCP — wraps the IPQualityScore fraud-prevention API

MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.

PhishTank MCP — wraps PhishTank API (checkurl.phishtank.com)

Security Feeds MCP.

SecurityTrails MCP — wraps SecurityTrails API (securitytrails.com)

ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)

Discover Playwright workflows, start runs, and inspect results in Playrunner Cloud.

Approved test intent, reviewed Playwright automation and run evidence, inside your editor.

Poly1305 hex length, input discarded

Poly1305 tag length, input discarded

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

PreClick scans links for threats and confirms intent match with high accuracy before agents click.

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

Free enterprise-grade due diligence for your app, run by your coding agent. Then the full SDLC.

Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.

Human QA on real phones and browsers for your coding agent. Pass/fail per step, with screenshots.

QRNG-seeded random bytes, seeds, and ML-KEM-768 keys with signed provenance receipts.

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.

Scan a live web page for WCAG 2.1/2.2 AA issues with axe-core: score, grade, failing rules.

Inspect a public site's tracking signals, grade consent evidence, and get remediation playbooks.