Security & Testing MCP Servers for Cursor

Policy-enforcing MCP proxy with portable evidence output.

Governed execution cells for AI agents: Docker/K8s sandboxes with policy, audit, and approvals.

No-key MCP: audit/certify MCPs, signed trust history; join Gold Rush Town & build with your LLM.

Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.

AI-powered scam and threat verification for phone numbers, URLs, texts, and emails.

MCP server for ScanMalware.com URL scanning, malware detection, and analysis.

OFAC and global sanctions screening: crypto addresses, emails, websites, IDs, countries, VPN, geo

Free IPv4 lookups against a distributed attacker-observation corpus.

CVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.

Check text for leaked credentials before an agent writes or commits it. Runs locally.

Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.

Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.

Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Encrypted store for API keys and database URLs your code needs. Use them without reading them.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Cybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.

SHA-1 hex length, input discarded

SHA3-384 hex length, input discarded

Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.

SHAKE256 hex length band, input discarded