Security & Testing MCP Servers for Microsoft Copilot

CVE triage in one call: NVD, CVSS, CISA KEV, EPSS, public exploits and an explained risk score.

Twelve tools: token, wallet, contract and site security. Two free, the rest $1 in USDC over x402.

Debian Security Advisories (DSA). $0.01/query. Register in-session — free testnet funds.

28 pay-per-event tools for regulatory, sanctions, procurement, and corporate-registry monitoring.

Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

DORA OS EventFabric - 14-tool event stream for DORA compliance signals and pub/sub fabric.

Check a California data broker's next DROP 45-day deletion-request check-in deadline.

EU compliance checks for AI agents: sanctions, company, VAT ID, IBAN, email. Pay per call.

Screen a business or person for exclusions, debarment, and sanctions (SAM.gov, OFAC).

Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

Cloudflare Workers MCP server: graphql-dos-shield

Encrypted secret store and rotation for autonomous agent credentials

Email OSINT Tool - Find Registered Accounts on 120+ Sites

Known vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.

Katalon True Platform MCP: design tests, run with AI, upload reports, assess release readiness.

Ask about your Kodem Security data and act on findings in plain language, with your permissions.

Is this dependency current, licensed, deprecated, or already carrying a CVE?

Remote MCP for tool license checks, vendor policy review, alternatives, and license receipts.

Find relevant security data from Sentinel data lake for building effective agents. More:aka.ms/s/de

MSRC Windows updates: CVE rollups, Patch Tuesday. Register in-session — free testnet funds.