Security & Testing MCP Servers for HTTP / API

Domain exposures: breaches, infostealers, ULP heap, cookies. Counts and samples, free.

Argon2 hex length, input discarded

Verifies Bernstein run receipts and hash chains; lists the shipped presets and adapters. Read-only.

Biometric data privacy auditor ensuring Zero-Knowledge compliance.

CIRCL Vulnerability-Lookup — aggregated vulnerability records

CloudOracle - 14-tool multi-cloud compliance MCP: AWS, Azure, GCP posture, IAM, configs.

Check whether a NAICS code aligns with a vertical: a routing-for-review signal, not a determination.

Signed, Bitcoin-anchored observations of AI training-data disclosure; verifies silence proofs, seals

CSP directive count, value discarded

Certificate Transparency search: subdomains, certificate history and hostname keyword search.

Scans schema metadata to classify PHI, score HIPAA readiness, and generate compliant migrations.

CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

OSINT dark web database search tool detecting credential leaks.

Debian Security Advisories (DSA). $0.01/query. Register in-session — free testnet funds.

28 pay-per-event tools for regulatory, sanctions, procurement, and corporate-registry monitoring.

Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

DORA OS EventFabric - 14-tool event stream for DORA compliance signals and pub/sub fabric.

Check a California data broker's next DROP 45-day deletion-request check-in deadline.

EU compliance checks for AI agents: sanctions, company, VAT ID, IBAN, email. Pay per call.

Compliance tools for Dynamics 365, Salesforce, Oracle, SAP and Power BI integrations