Security & Testing MCP Servers for Codex CLI

IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.

MCP server for visual regression testing: triage a PR's UI diffs from your coding agent.

Grade a site's security headers with fixes and a badge; read logs or code for the defender.

Website flagged by security vendors? Free scan, then we send the removal requests for you (paid).

Flags phantom-squatted/typosquatted domains and known-malicious URLs before an agent follows them.

Username Search & Lookup - Maigret OSINT Tool

Secret scanner preventing leaks of corporate keys and credentials.

Injects secrets into shell commands at exec time; plaintext never reaches the LLM context

Runs your code against a contract; HELD or BROKE at the exact input. Deterministic. 0.10 USDC/call.

Independent trust scores, tool surfaces and change history for MCP servers.

Check a deployed web app for security headers, SEO, accessibility and performance, with a grade.

Encrypted local vault for API keys. Your AI fetches keys on demand and scans code for leaks.

Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes

Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.

VPNCompareHQ: the site's own MCP server — dataset, enquiry (enquiry = a human handoff, not a...

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

Redacts PII from your business tools before the AI sees them — with a provable audit log.

Improve security writing, score it against rubrics, plan IR, CTI, vuln, and product strategy.

Whirlpool hex length, input discarded

MCP server for Abnormal Security — AI-powered email threat detection, cases, and remediation.

MCP server for ESET PROTECT's ESET Connect API - device, EDR, vulnerability, patch, and user data.