Security & Testing MCP Servers for Microsoft Copilot

dilisense MCP — sanctions / PEP / criminal / adverse-media screening (AML/KYC)

Dated quotes of GDPR art. 28 subprocessor lists: who lists whom, fourth parties, what changed, when.

MCP server to check domain settings: SPF/DKIM/DMARC, DNS, SSL certificates, security headers, subdomains and lookalike domains, using only p

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.

Ransomware leak-site claim lookups, group profiles and a $3 vendor risk report (x402 USDC).

Fraud and abuse detection for SaaS: investigate scored identities, triage escalations, tune rules.

Accessibility pre-checks (WCAG/BFSG) in a real browser + statement drafts. Pay per call.

Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.

Screen a name against OFAC's SDN and Consolidated Sanctions lists before a transaction.

Verify a vuln report's file/line/function claims against a real GitHub repo.

Redact PII from text before it reaches a model. Nothing stored, no third-party AI.

EOL dates, risk scores, CISA KEV exposure, SBOM audits and edge-device EOS for 500+ products.

Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.

Check dependencies against CISA's real Known Exploited Vulnerabilities feed.

Fallax is a phishing simulation and security awareness training platform. Read your results.

The honest trust index for x402: check who you're paying before your agent pays.

Every NIST FIPS 140 certificate, plus the modules-in-process queue NIST publishes only as a page.

Give an AI agent a throwaway email and phone number to test signup/verification flows end to end.

GovernanceOracle - 10 governance tools: board packs, policies, attestations, evidence.

Scan URLs for WCAG 2.1 violations, generate AI fixes, and produce VPAT 2.5 compliance reports.

Free Article 50 website scanner, notice builder, and checksum verifier. No key or payment.