Security & Testing MCP Servers for Microsoft Copilot

Official MCP server for Qase — manage test cases, runs, suites, defects via AI tools.

Open COSO internal-control review MCP: scope, risk, controls, sampling, testing, workpapers.

Browser-local and CLI static evidence for deployed AI model artifacts.

Wraps stdio MCP servers. Risky calls wait for a person; no answer, no run. Signed records.

Free WCAG 2.2/ADA/508 accessibility MCP: scan, AI fixes, verify, vision audit, localhost tunnel

Deterministic axe-core accessibility scans (WCAG 2.1 AA, EN 301 549, PDF/UA) via your account.

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

QA platform for agents: coverage signals, in-repo test plans, verified tests and release governance.

Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.

VPN, proxy, Tor, hosting and CDN detection for any IP address, from the VPNDetection API.

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

Signed, offline-verifiable safety scores for the MCP servers, packages & tools an agent connects to

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Launch and verify high-fidelity mobile simulations from an AI agent.

Run, debug and inspect Playwright E2E tests from any AI agent: diagnostics, live DOM, selectors.

AI reasoning checks any document against known international standards before your agent acts on it.

Offline methodology engine for authorized penetration testing, CTF, and security research.

Classify data safety before storing or sharing. GDPR, HIPAA, PCI-DSS, CCPA. AI-powered.

Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML.

CISA KEV with BOD 26-04 deadlines, SSVC prioritization, and the ICS advisory corpus (CSAF). Keyless.

Screen any vessel by IMO for sanctions, ownership opacity and vetting grade. Keyless check included.