Security & Testing MCP Servers for Claude Desktop

EU AI Act compliance MCP server - risk classification with structured signals, article grounding, GPAI systemic risk, Art. 6(3) exception

Threat intelligence for IPs and domains from Maltiverse. No key required.

Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.

EU AI Act risk classification, obligations and Article 50 disclosures. Offline, no API key.

MCP server for AI-orchestrated human QA testing. Let AI agents request real human testing of web applications.

32 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API.

Prompt injection + PII detection for LLM apps and agent pipelines. Deterministic, sub-25ms.

Verification and trust checks for AI agents: validate, screen, propose, accounts, usage.

Security middleware for MCP. Blocks prompt injection, PII leakage, and resource exhaustion.

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

Gives an AI agent a disposable email and a real UK phone number to test signup flows.

Audits tests instead of writing them: what each one really asserts. 4 tools, local.

Score password strength locally with the zxcvbn algorithm. No network and no key.

Screen any vessel by IMO for sanctions, ownership opacity and vetting grade. Keyless check included.

BYOK, fully local AI agent that tests your app/API and writes a real Playwright spec on success.

Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.

Security scanner for MCP servers

Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.

MCP server exposing cellar-door EXIT and ENTRY verifiable markers as AI-native tools

Free, real-browser accessibility scanner for AI coding agents. Scans localhost with Playwright + axe-core (and optionally Pa11y/HTMLCS)

Agent-first MCP server for WeChat Mini Program debugging & automation via WeChat DevTools.