Security & Testing MCP Servers for Devin Desktop

Was this document edited, did its redactions hold, is it safe for a model to read — Tamperlens API.

Find the Unicode that hides meaning: bidi controls, invisibles, homoglyphs and mixed scripts.

MCP server for JavaScript endpoint discovery and attack surface mapping. Discovers JS files from 23+ passive sources, extracts API

Register/verify your domains, queue security scans, and read findings (CVE, severity).

Read your EyalSec security events, machines, runs and rules from an AI assistant.

Send a password or API key as a link that opens once. Encrypted client-side, so we cannot read it.

Finds the 12 settings that break when public TLS certificates fall to 100 days on 2027-03-15: openss

Manage Koru Shield DNS filtering: profiles, rules, categories, schedules, and logs.

Privacy protection: scans, tracker detection, data broker opt-outs.

Crypto security, honeypot detection, wallet analysis, and token risk scoring across 31 blockchains.

Reads security headers and CSP line by line in your config file and names the lines that silently do

AI Bill of Materials (AI-BOM) generator + auditor MCP — CycloneDX ML-BOM, SPDX 3.0 AI profile, EU AI

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

Finds authorization holes in Next.js + Supabase apps and live Supabase databases. No API key.

Ten checks on the export paragraph of a repository that ships encryption

Audits firestore.rules and storage.rules for public access, expired test-mode dates and missing owne

Iso 27001 Ai MCP Server by MEOK AI Labs

A sandboxed MCP tool for reverse engineering with multiple tool integrations

Detect hardcoded secrets in source and config. Reports masked previews, never the values.

Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.