Security & Testing MCP Servers for Microsoft Copilot

Governance runtime for compliance: verified, human-approved writes to a tamper-evident record.

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

AWS cloud security scanners for AI agents — S3, IAM, EC2, EKS, RDS, CloudTrail, CloudWatch Logs

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.

Score an IP, email, phone, domain or device for fraud in one call, with the signals behind it.

Check breach exposure for your verified email and check locally computed password hash prefixes.

Open-source licence risk checks for AI coding agents and dependency trees.

Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.

Load testing and synthetic monitoring platform: test with Playwright, Browser Bot, or Protocol Bots.

Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).

Verify npm packages before your AI agent installs them: hallucinations, advisories, API drift.

AI-powered test automation: run tests, analyze failures, query results across mabl workspaces.

Pre-trade safety + wallets: Solana/EVM token risk, honeypots, counterparties, balances, txs, CVEs.

MCP server for MaxMind minFraud — score transactions for fraud risk from your AI assistant.

Paid remote MCP for server intake risk reports, tool review, approvals, and readiness.

Is this dependency current, licensed, deprecated, or already carrying a CVE?

Remote MCP for tool license checks, vendor policy review, alternatives, and license receipts.

Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.

Mozark's MCP server for AI-powered app testing: device access, test automation, and QA insights.

MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…