Security & Testing MCP Servers for Microsoft Copilot

Drive OctoPerf load testing from any AI agent: import, edit, validate, run scenarios, read metrics.

Screen names against US, UN, EU, UK, Canadian and Swiss sanctions and export-control lists. Free.

Governance maturity assessment, compliance gap analysis, and evidence-linked briefs for AI agents.

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT.

OSV.dev (Open Source Vulnerabilities) MCP.

Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.

AI website audit: security, SEO, performance, UX and accessibility checks with actionable fixes.

PBKDF2 hex length, input discarded

pcap magic endian, bytes discarded

PE MZ/PE signature, bytes discarded

Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.

Public phishing feed: suspicious/confirmed phishing URLs detected hourly. No auth, CC0.

Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.

FIRST.org EPSS (Exploit Prediction Scoring System) MCP.

GreyNoise Community MCP — internet scanner classification (free tier with key)

IPQualityScore MCP — wraps the IPQualityScore fraud-prevention API

MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.

PhishTank MCP — wraps PhishTank API (checkurl.phishtank.com)

Security Feeds MCP.