Security & Testing MCP Servers for Claude Code

Human QA on real phones and browsers for your coding agent. Pass/fail per step, with screenshots.

MCP server for Proofpoint Essentials -- MSP org, domain, user, licensing, and reporting management.

QRNG-seeded random bytes, seeds, and ML-KEM-768 keys with signed provenance receipts.

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

Reverse-engineering evidence from a running Windows process, not the binary on disk.

Scan a live web page for WCAG 2.1/2.2 AA issues with axe-core: score, grade, failing rules.

Inspect a public site's tracking signals, grade consent evidence, and get remediation playbooks.

Free scam checks for links, wallets, emails, and breach exposure. No signup.

Trust verdicts on repos, models, VS Code and Docker Desktop extensions and agent skills.

RIPEMD-160 hex length, input discarded

Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.

MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.

ROT47 charset transform length, input discarded

AI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control

S/MIME PKCS7 fence, body discarded

sanctions.io MCP — wraps the sanctions.io Screening API (api.sanctions.io)

Scam and phishing detection for AI agents: safe/warn/danger verdicts for URLs and messages.

Check a suspicious email, SMS, WhatsApp message or link for scam signals (Netherlands, Belgium).

Sanctions screening for AI agents: check a name against OFAC and EU lists. Free during launch.

Stateless PII redaction over MCP/REST. Free ≤1000 words or $0.01/call; file upload supported.

scrypt N cost band, value discarded