Security & Testing MCP Servers for Microsoft Copilot

Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.

Capture a web source, or seal a hash you hold, into a signed receipt anyone can verify offline.

Tamper-evident evidence log: signed heads, proofs, and recording salted digests of your records.

Accessibility scans with evidence, public reports, and fresh checks after fixes.

Screen a business for federal exclusions & sanctions: OFAC SDN, HHS-OIG LEIE, SAM.gov debarment.

Verify URLs, payees, and messages before acting: red/yellow/green trust verdicts for agents.

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

Feodo Tracker MCP — botnet C&C IP blocklist from abuse.ch.

Scan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions.

Real-time Python package and vulnerability data for AI coding agents.

Signup fraud checks: score emails and IPs, look up IPs and manage your blocklist.

Guidance for answering vendor security questionnaires. Every result carries the page it came from.

Device intelligence for AI agents: Fingerprint events, smart signals, and API key management.

Flash and run real firmware on physical embedded dev boards from an AI agent, over MCP.

Writes adversarial test suites for AI-built code. Your agent's test engineer.

Audits TLS/SSL handshake latency, HSTS headers, and HTTPS availability on the edge.

EU AI Act compliance for AI agents. Audit trail, delegation certs, and geospatial AI inference.

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

GOST R 34.11 hex length, input discarded

Pre-flight check for AI coding agents: hallucinated packages + hardcoded secrets. Free, no account.

Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.