Security & Testing MCP Servers for Devin Desktop

Validated API and app vulnerability findings with remediation guidance.

OSINT dark web database search tool detecting credential leaks.

Bulk breach notice deadline checks: US states, SEC, HIPAA, GDPR, UK, per check billing via Apify.

Fail-closed privacy layer that pseudonymises enterprise API data for LLM agents and MCP clients.

Sourced privacy answers: how private an app is, tool picks, app swaps, de-Googling, breaches.

Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.

DependencyOracle - 10 ICT dependency tools: SBOM, supply chain, third-party graph.

DER sequence tag check, body discarded

dilisense MCP — sanctions / PEP / criminal / adverse-media screening (AML/KYC)

Dated quotes of GDPR art. 28 subprocessor lists: who lists whom, fourth parties, what changed, when.

DNS resolution, HTTP security headers, and SPF/DMARC email hygiene audits.

MCP server to check domain settings: SPF/DKIM/DMARC, DNS, SSL certificates, security headers, subdomains and lookalike domains, using only p

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.

Ransomware claim lookups, a 100-vendor bulk check, webhook watch alerts, vendor risk reports (x402).

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

Fraud and abuse detection for SaaS: investigate scored identities, triage escalations, tune rules.

Accessibility pre-checks (WCAG/BFSG) in a real browser + statement drafts. Pay per call.

Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.

Screen a name against OFAC's SDN and Consolidated Sanctions lists before a transaction.

Verify a vuln report's file/line/function claims against a real GitHub repo.

Redact PII from text before it reaches a model. Nothing stored, no third-party AI.