Security & Testing MCP Servers for Codex CLI

Multi-jurisdictional AI compliance readiness scoring with sourced penalty math.

HKDF-SHA256 output length, input discarded

Verified AI-agent outcomes: secret scanning, JSON cleanup, dedupe, anomaly and schema checks.

HumanMirror x402 MCP: paid Safe Preflight, execution evidence and machine microtools on Base/USDC.

MCP server for Huntress — accounts, organizations, agents, incidents, and reports.

37 paid x402 MCP tools for OSINT, prediction markets, web intel, and agent security on Base USDC.

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

Agent-native security, trust, reliability, data and procurement tools for AI workflows.

Formally-verified injection/exfiltration detector for AI agents (MCP-02).

Free IP risk and geolocation lookup: proxy, VPN and datacenter detection. No API key.

Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.

Regression checks for Japanese order automations: six free cases, strict JSON scoring and CI gates.

Read-only EU sanctions preflight: screen names/IDs against EU list. Evidence, not a verdict.

Governance runtime for compliance: verified, human-approved writes to a tamper-evident record.

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

Local encrypted secret broker for AI agents: request keys by name, approve each use over MCP.

Go code coverage analysis tool with MCP server for AI-powered coverage workflows

AWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.

Score an IP, email, phone, domain or device for fraud in one call, with the signals behind it.