Security & Testing MCP Servers for Codex CLI

Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.

EU AI Act risk classification, obligations and Article 50 disclosures. Offline, no API key.

32 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API.

Prompt injection + PII detection for LLM apps and agent pipelines. Deterministic, sub-25ms.

Verification and trust checks for AI agents: validate, screen, propose, accounts, usage.

An MCP server for analyzing PCAP files.

MCP server for AI-orchestrated human QA testing. Let AI agents request real human testing of web applications.

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

Scan, enumerate, and risk-score every MCP server configured on your machine.

Gives an AI agent a disposable email and a real UK phone number to test signup flows.

Audits tests instead of writing them: what each one really asserts. 4 tools, local.

Score password strength locally with the zxcvbn algorithm. No network and no key.

Screen any vessel by IMO for sanctions, ownership opacity and vetting grade. Keyless check included.

BYOK, fully local AI agent that tests your app/API and writes a real Playwright spec on success.

Autonomous QA MCP for web and macOS that tests like a real engineer, finds bugs, and verifies them.

Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.

Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.

MCP server exposing cellar-door EXIT and ENTRY verifiable markers as AI-native tools

Free, real-browser accessibility scanner for AI coding agents. Scans localhost with Playwright + axe-core (and optionally Pa11y/HTMLCS)

Security scanner for MCP servers

Agent-first MCP server for WeChat Mini Program debugging & automation via WeChat DevTools.