Security & Testing MCP Servers for HTTP / API

Edge Case Museum MCP — 'Your code works. Except for these wonderfully terrible inputs.'

Test your AI agents for security and safety weaknesses, and re-verify the fixes.

Accessibility scans with evidence, public reports, and fresh checks after fixes.

Check if a package or MCP server is safe before installing. Find tools, connectors, datasets.

Persist failure simulations. No external fault injection or transfers. Customer key required.

Audits any Base/EVM address for bytecode risk, proxy patterns, honeypot selectors, and balance.

Who can change an EVM contract or Safe: proxy admin, owner, Safe signers, timelock. Free alerts.

Tells your agent if a link is safe before it clicks, signs in or pays.

Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.

ProofRun: bounded HTTP acceptance checks for agent deployments. $0.01 USDC per pack.

ProofRun: bounded HTTP acceptance checks for agent deployments. $0.01 USDC per pack.

Disposable test inboxes for agents: create an address, then wait for its code or link.

Prove a web page or document existed on a date: public SHA-256 registry anchored in Bitcoin. Free.

Crypto forensics with sources: deployer records, OFAC matches, exchange and bridge attribution.

Kostenlose Sicherheits-Checks ohne Konto: SPF/DKIM/DMARC, Mails, Links, Webseiten, Passwort-Leaks.

Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.

Signed EOL dates, exploited CVEs and LLM prices; pay per call in USDC, no account, no daily cap.

UK sanctions, export controls, Companies House owners, FCA register and property checks.

Screen names/IDs against Ukraine's NSDC State Sanctions Register (snapshot) via Apify.

Independent checks of paid x402 data sellers and of AI-agent access to shopping and travel sites

Check SQL against your Vericto rules before it runs: blocks destructive or risky statements.