Security & Testing MCP Servers for Codex CLI

Honeypot detection & token risk scan for ERC-20s. Risk score 0-100, tax, source verification.

HMAC-SHA256 hex length, input discarded

Credential isolation for AI agents: placeholder secrets, policy checks, optional human approval.

Detect AI-generated images, videos, and audio with identifAI's deepfake detection tools.

Run OSINT queries and investigations with Indicia

MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.

SANS Internet Storm Center (ISC) MCP.

MCP server for Island Browser's Admin Actions, Audit, Compromised Credential, and Device APIs.

The compliance specialist your AI calls: ISO 27001, SOC 2, GDPR, NIS 2, DORA and more.

Is this name on Japan's MOF asset-freeze list? Hosted, list-change history kept. Reference only.

Generates unit tests for Python code with coverage before/after reports and concrete edge cases.

Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface

GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies.

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

Signed, traced record of what an npm package or file attempts when run, network included. No key.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Ensemble testing of web pages for accessibility, usability, and web standards

Scan code for Korean compliance risks — PIPA/Personal Information Protection Act, Network Act, Credit Info. Not legal advice.

CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source.

Pre-launch website QA: deterministic rule-based scans, readiness score, and blockers for agents.

Trust scores and organic demand intelligence for x402 agents