Security & Testing MCP Servers for HTTP / API

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

Scan URLs or HTML for WCAG 2.2 violations. 75-rule manifest, weighted score, shareable reports.

Cryptographically anchored evidence for agents: verified run receipts, proof-gated settlement.

LEEF attr count, line discarded

Compliance lint for AI, scraping, and privacy law. Cited findings in 200 or more jurisdictions.

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.

LM hash 16-hex shape, value discarded

Send API keys and private files to someone else's agent, end-to-end encrypted.

Anthropic logs audit filter and cybersecurity threat analyzer.

NIST 800-171 controls and 800-171A objectives, crosswalks, exact SPRS scoring, POA&M generation.

2,029 DISA STIG rules with official check/fix text, CCI mappings, and .ckl checklist export.

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.

Analyzes threats and verifies URLs align with the agent's intended goal.

Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.

Browser QA agent that won't return a false green: verified PASS/FAIL + access-control probing.

Check if a counterparty is safe to pay: trust/risk score for AI agents. Scam/phishing screen.

Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats

Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.