Security & Testing MCP Servers for Devin Desktop

Verified AI voice-clone scam incidents, loss stats, and a family verification protocol. Keyless.

Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate.

URLhaus MCP — wraps abuse.ch URLhaus malware URL database (free, no auth)

Privacy-preserving file proofs on Solana. Files are hashed locally. Currently free, no API key.

Sanctions, PEP, watchlist, recall, business, and contract screening. Free tier, no auth required.

Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.

Read-only smart-contract security intelligence for autonomous agents.

Security grades for MCP servers and npm/PyPI packages, ranked by CISA KEV and EPSS.

Chinese content compliance check: Ad-law banned terms + AI labeling rules, with legal basis provided for each clause.

XFA's remote MCP server — query device posture, compliance, policies & CVEs. Read-only.

ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.

AI scam-shield for Web3: screen token contracts for honeypot/drain patterns. Aegis AI group admin.

Read-only library of 24 defensive cybersecurity skills: ATT&CK, ATLAS, DFIR, CTEM and more.

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

Verify Attest agreements, stamp codes, receipts, proofs and SHA-256 fingerprints, with no sign-in.

Use before citing a page, sharing links or installing a suggested package. Signed receipts.

UAE ICV compliance: governed scores, evidence gaps and actions with deterministic numbers.

Read-only tools for AI agents: who can change a smart contract, how fast. Signed data, testnet.

Acceptance tests for any web app, however it's built: full journeys on apps you're allowed to test.

Record how any CLI behaves and check that a rewrite behaves the same (golden tests).

Sanctions screening (OFAC/UK/EU/UN) + PEP + GLEIF entities via Compliance Engine.