Security & Testing MCP Servers for Microsoft Copilot

Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.

Check a live app you own for public databases, leaked keys and exposed files.

Load & browser performance testing — drive MaxoPerf from your AI agent with your API key.

Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.

Personalised developer security learning pathways from SecDim's challenges and courses.

Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.

Audit websites for SEO, performance, security, accessibility and agent experience issues.

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

Inspect selected project excerpts and screen user-confirmed facts for bounded EU AI Act readiness.

Ephemeral mailboxes and a mock OAuth IdP for testing email and auth flows — 39 API-driven tools

MITRE CWE API MCP.

Neutral escrow for customer-data offboarding (GDPR/EU Data Act): query MyDataPass facts.

Read-only opt-out guides, removal routes for 950+ data brokers, and privacy library search.

Read-only offline network profiles, caller-supplied Discovery and historical/synthetic cases.

NIST Standards MCP pack

EU compliance corpus across 8 frameworks (NIS2, DORA, AI Act, ISO 27001 + more) via MCP.

CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.

Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats

Polish phone number lookup: who called, spam and scam checks, UKE DNO registry, CERT phishing stats

NVD MCP — wraps the NIST National Vulnerability Database API.

Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.