Security & Testing MCP Servers for Claude Code

Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.

AML/CFT compliance oracle: wallet screening, sanctions, PEPs, jurisdiction risk.

Multitenant Streamable HTTP wrapper for the SentinelOne purple-mcp server.

SEON MCP — wraps the SEON fraud / digital-footprint enrichment APIs (seon.io)

Paid remote MCP for server-card validation, auth checks, trust packets, and readiness.

Risk-ranked registry of AI tools: look up an AI tool's risk or check if a domain is shadow AI.

Deterministic trust gate for AI output: leaked-secret, prompt-injection & PII in one call.

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

Is this person indexed on that data-broker domain? A three-state verdict, with the evidence.

OAuth website audits: security, SEO, AI visibility, integrations, accessibility and performance.

OFAC, LEI, EU VAT, AI Act, and company compliance preflight for agents.

Visual regression review: projects, builds, visual diffs, approvals, comments and analytics.

Social Analyzer - Find Social Media by Username | Sherlock

Hosted supply-chain security MCP server that scores npm/PyPI/Maven/Go packages for vulnerabilities, maintenance health and behavioral risk.

Solana token/wallet rug-risk scoring. Free scan; $2 SOL unlocks full wallet report. No signup.

EU AI Act sovereignty scanning. Provider residency, registration status, audit trail support.