Security & Testing MCP Servers for Microsoft Copilot

AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel.

Website trust checks: 0-100 safety score, verdict and community reviews (truster.info).

Signed sandbox verdicts on any artifact, plus an agent marketplace. No key, no signup, no payment.

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

A2A TrustGate: 4-gate firewall that screens every AI-agent action before it runs. 50 tools.

Deterministic AI liability attribution with Bitcoin-anchored proof certificates.

Manage Koru Shield DNS filtering: profiles, rules, categories, schedules, and logs.

Crypto security, honeypot detection, wallet analysis, and token risk scoring across 31 blockchains.

Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.

Generate, audit, and maintain legal policies that match what your code actually does.

Live threat intel for agents: incidents, actors, CVEs with KEV/EPSS, ransomware leak-site victims.

Deterministic AI-liability attribution: signed, Bitcoin-anchored vendor/deployer/user fault split.

Scan suspicious messages, URLs, and text for scams with AI. Free tier - no API key required.

Format-true synthetic test data for 90 countries — IBANs, SWIFT/BIC, IDs, cards, all certified.

Classify any AI system under the EU AI Act: risk tier + binding Articles, verbatim from the law.

Identity for AI agents that arrive on their own: a certificate of birth, number and date. Free.

Scan agent payment endpoints (x402, AP2, L402, MPP, 402) for a trust grade A-F before paying.

Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.

Independent AI-governance measurement MCP. Free reads + x402 evidence. Measurement not cert.