Security & Testing MCP Servers for Microsoft Copilot

Free crypto scam checks: token and contract risk, scam or sanctioned addresses, phishing links.

Query Truss threat intelligence via hosted MCP (OAuth). Growth+ plans.

Free OFAC SDN wallet screen + sample preview for AI agents on Base. Read-only, no payment surface.

Post-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify.

IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.

MCP server for visual regression testing: triage a PR's UI diffs from your coding agent.

Website flagged by security vendors? Free scan, then we send the removal requests for you (paid).

Unit 42 malware analysis & threat research. $0.01/query. Register in-session — free testnet funds.

Researches Japanese companies' third-party certifications (ISO 27001, P Mark, ISMAP, etc.) from public sources, returning 5-category verdict

Flags phantom-squatted/typosquatted domains and known-malicious URLs before an agent follows them.

Username Search & Lookup - Maigret OSINT Tool

Runs your code against a contract; HELD or BROKE at the exact input. Deterministic. 0.10 USDC/call.

Independent trust scores, tool surfaces and change history for MCP servers.

Check a deployed web app for security headers, SEO, accessibility and performance, with a grade.

Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes

Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.

VPNCompareHQ: the site's own MCP server — dataset, enquiry (enquiry = a human handoff, not a...

Redacts PII from your business tools before the AI sees them — with a provable audit log.

Improve security writing, score it against rubrics, plan IR, CTI, vuln, and product strategy.

Whirlpool hex length, input discarded

Read-only record of AI vendor sub-processor lists, DPA notice windows and model retirements