Security & Testing MCP Servers for Claude Code

HMAC-SHA256 hex length, input discarded

Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.

Detect AI-generated images, videos, and audio with identifAI's deepfake detection tools.

Run OSINT queries and investigations with Indicia

MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.

SANS Internet Storm Center (ISC) MCP.

MCP server for Island Browser's Admin Actions, Audit, Compromised Credential, and Device APIs.

The compliance specialist your AI calls: ISO 27001, SOC 2, GDPR, NIS 2, DORA and more.

Is this name on Japan's MOF asset-freeze list? Hosted, list-change history kept. Reference only.

Generates unit tests for Python code with coverage before/after reports and concrete edge cases.

Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface

GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies.

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

Signed, traced record of what an npm package or file attempts when run, network included. No key.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Ensemble testing of web pages for accessibility, usability, and web standards

Scan code for Korean compliance risks — PIPA/Personal Information Protection Act, Network Act, Credit Info. Not legal advice.

CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source.

Pre-launch website QA: deterministic rule-based scans, readiness score, and blockers for agents.

Trust scores and organic demand intelligence for x402 agents

Compliance lint for AI, scraping, and privacy law. Cited findings in 200 or more jurisdictions.