Security & Testing MCP Servers for Microsoft Copilot

Check an IP or your own network exit before using ChatGPT, Claude, Gemini or Meta Muse.

Is this name on Japan's MOF asset-freeze list? Hosted, list-change history kept. Reference only.

check-package: block malicious npm/PyPI deps before your AI agent installs them. Free, no key.

k-anonymity 5-hex prefix, value discarded

Qualified eIDAS RFC 3161 timestamping for AI workflow provenance. SIGNIUS/IDnow backbone.

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

Scan URLs or HTML for WCAG 2.2 violations. 75-rule manifest, weighted score, shareable reports.

Cryptographically anchored evidence for agents: verified run receipts, proof-gated settlement.

LEEF attr count, line discarded

Compliance lint for AI, scraping, and privacy law. Cited findings in 200 or more jurisdictions.

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report.

LM hash 16-hex shape, value discarded

Send API keys and private files to someone else's agent, end-to-end encrypted.

NIST 800-171 controls and 800-171A objectives, crosswalks, exact SPRS scoring, POA&M generation.

2,029 DISA STIG rules with official check/fix text, CCI mappings, and .ckl checklist export.

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.

Analyzes threats and verifies URLs align with the agent's intended goal.

Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.

Browser QA agent that won't return a false green: verified PASS/FAIL + access-control probing.