Security & Testing MCP Servers for Microsoft Copilot

Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.…

PEM fence check, key discarded

PGP armor fence check, key discarded

Phoenix/rebrand relink detection: links a debarred principal to a newly-formed business entity.

PhoneInfoga - International Phone Number OSINT

AbuseIPDB MCP — wraps AbuseIPDB v2 API (api.abuseipdb.com/api/v2)

Shodan InternetDB MCP — wraps Shodan InternetDB (internetdb.shodan.io)

urlscan.io MCP.

VirusTotal MCP — file / URL / domain / IP reputation (BYO key)

PolicyOracle - 12 policy lifecycle tools: drafting, approval, distribution, attestation.

Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.

Email, phone, domain, URL & OFAC verification; phishing and IBAN checks via x402.

AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.

Signed, deterministic compliance state per object per jurisdiction, resolved upstream

Detects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites.

RegisterOracle - 10-tool DORA Art.28 register: ICT third-party, contracts, criticality.

Audit GitHub repos for malicious and supply-chain code before you depend on them.

Resemble AI: deepfake detection, media intelligence, and watermarking actions, plus docs tools.

ROT5 digit transform length, input discarded

No-key MCP: audit/certify MCPs, signed trust history; join Gold Rush Town & build with your LLM.

Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.