Security & Testing MCP Servers for Microsoft Copilot

Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats

Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.

$0.01/call via x402: OFAC wallet screen, DNS, email auth, domain age, email verify, URL unshorten.

Security incidents across Nigeria, such as kidnapping and banditry, with sources and confidence.

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

Pay-per-call TLS, DNS/email-auth and expiry checks, plus a $2 full site audit (x402 USDC).

Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.

x402-gated safety checker for npm/PyPI packages before you npm install / pip install.

AI website audit: security, SEO, performance, UX and accessibility checks with actionable fixes.

PEM fence shape, key discarded

PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level

Threat intel for AI agents: IOCs, CVEs (EPSS/KEV), wallet sanctions and age, domain and URL checks.

Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.

CISA KEV MCP.

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

PreClick scans links for threats and confirms intent match with high accuracy before agents click.

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

AI QA tester — real browsers scan sites for bugs, SEO, perf, and accessibility issues via chat.

Free enterprise-grade due diligence for your app, run by your coding agent. Then the full SDLC.