Security & Testing MCP Servers for Claude Code

EU compliance corpus across 8 frameworks (NIS2, DORA, AI Act, ISO 27001 + more) via MCP.

CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.

Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats

Polish phone number lookup: who called, spam and scam checks, UKE DNO registry, CERT phishing stats

NVD MCP — wraps the NIST National Vulnerability Database API.

Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.

Drive OctoPerf load testing from any AI agent: import, edit, validate, run scenarios, read metrics.

Screen names against US, UN, EU, UK, Canadian and Swiss sanctions and export-control lists. Free.

Governance maturity assessment, compliance gap analysis, and evidence-linked briefs for AI agents.

MCP server for Openlane GRC: controls, evidence, policies, risks, workflows, and approvals.

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT.

OSV.dev (Open Source Vulnerabilities) MCP.

MCP server for OWASP ZAP vulnerability scanning with Docker management

Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.

AI website audit: security, SEO, performance, UX and accessibility checks with actionable fixes.

PBKDF2 hex length, input discarded

pcap magic endian, bytes discarded

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server

PE MZ/PE signature, bytes discarded

Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...