Security & Testing MCP Servers for Microsoft Copilot

Security Feeds MCP.

SecurityTrails MCP — wraps SecurityTrails API (securitytrails.com)

ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)

Discover Playwright workflows, start runs, and inspect results in Playrunner Cloud.

Approved test intent, reviewed Playwright automation and run evidence, inside your editor.

Poly1305 hex length, input discarded

Poly1305 tag length, input discarded

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

PreClick scans links for threats and confirms intent match with high accuracy before agents click.

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

Free enterprise-grade due diligence for your app, run by your coding agent. Then the full SDLC.

Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.

Human QA on real phones and browsers for your coding agent. Pass/fail per step, with screenshots.

QRNG-seeded random bytes, seeds, and ML-KEM-768 keys with signed provenance receipts.

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

Scan a live web page for WCAG 2.1/2.2 AA issues with axe-core: score, grade, failing rules.

Inspect a public site's tracking signals, grade consent evidence, and get remediation playbooks.

Free scam checks for links, wallets, emails, and breach exposure. No signup.

Trust verdicts on repos, models, VS Code and Docker Desktop extensions and agent skills.

RIPEMD-160 hex length, input discarded

ROT47 charset transform length, input discarded