Security & Testing MCP Servers for DeepSeek Harness

Verify structured evidence and return machine-verifiable provenance, assurance, and receipts.

Signed timestamp receipts for a SHA-256 hash. Send only the hash; we never see the document.

Live tech-stack scan of any public site — vendors, account IDs, scripts, JSON-LD. 2 tools.

Search and monitor bug bounty programs and audit contests across ten platforms.

A flock of AI users tests your deployed app and reports where real people get stuck, with fixes.

Investigate security events and manage the allow/deny lists an analyst acts on.

Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.

AI inventory and EU AI Act compliance. Find AI tools and use cases, check new AI uses before launch.

Did it really happen? Independent signed receipts for AI agents: page, domain, email, heartbeat.

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

CSP-Report-Only directive count, value discarded

Self-healing CI tests and proof of work for AI agents

Search and read Cyber Library, a free structured cybersecurity knowledge base. Read-only, no auth.

Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.

Is this website a scam? Dated, sourced fraud assessments of domains. Free, read-only, no key.

Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

The DLP MCP provides the compliance violation in the one drive, google drive documents.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.

Audits AI-built websites for France and Belgium: cookies, GDPR, legal pages, exposed keys, security.

Public-repo MCP canary with spoofed private repository.id for owned-account registry fallback test.