Security & Testing MCP Servers for HTTP / API

Read token metadata, applications, audit logs, proxies and usage in the PCI vault.

BER identifier octet, bytes discarded

Verify structured evidence and return machine-verifiable provenance, assurance, and receipts.

Signed timestamp receipts for a SHA-256 hash. Send only the hash; we never see the document.

Live tech-stack scan of any public site — vendors, account IDs, scripts, JSON-LD. 2 tools.

Search and monitor bug bounty programs and audit contests across ten platforms.

A flock of AI users tests your deployed app and reports where real people get stuck, with fixes.

Investigate security events and manage the allow/deny lists an analyst acts on.

Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.

AI inventory and EU AI Act compliance. Find AI tools and use cases, check new AI uses before launch.

Did it really happen? Independent signed receipts for AI agents: page, domain, email, heartbeat.

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

CSP-Report-Only directive count, value discarded

Self-healing CI tests and proof of work for AI agents

Search and read Cyber Library, a free structured cybersecurity knowledge base. Read-only, no auth.

Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.

Is this website a scam? Dated, sourced fraud assessments of domains. Free, read-only, no key.

Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

The DLP MCP provides the compliance violation in the one drive, google drive documents.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.