Security & Testing MCP Servers for DeepSeek Harness

Accessibility pre-checks (WCAG/BFSG) in a real browser + statement drafts. Pay per call.

Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.

Screen a name against OFAC's SDN and Consolidated Sanctions lists before a transaction.

Verify a vuln report's file/line/function claims against a real GitHub repo.

Redact PII from text before it reaches a model. Nothing stored, no third-party AI.

EOL dates, risk scores, CISA KEV exposure, SBOM audits and edge-device EOS for 500+ products.

Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.

Check dependencies against CISA's real Known Exploited Vulnerabilities feed.

Fallax is a phishing simulation and security awareness training platform. Read your results.

The honest trust index for x402: check who you're paying before your agent pays.

Every NIST FIPS 140 certificate, plus the modules-in-process queue NIST publishes only as a page.

Give an AI agent a throwaway email and phone number to test signup/verification flows end to end.

Run AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.

GovernanceOracle - 10 governance tools: board packs, policies, attestations, evidence.

Cloudflare Workers MCP server: graphql-dos-shield

Scan URLs for WCAG 2.1 violations, generate AI fixes, and produce VPAT 2.5 compliance reports.

Free Article 50 website scanner, notice builder, and checksum verifier. No key or payment.

HackerTarget MCP.

Deterministic SHA, HMAC, Base64 and JWT decode tools with prepaid direct-USDC API credits on Base.

HealthGuard - 12-tool health/medical AI safety MCP: PII redaction, HIPAA, GDPR Art.9.

Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals.