Security & Testing MCP Servers for Devin Desktop

FIRST.org EPSS (Exploit Prediction Scoring System) MCP.

GreyNoise Community MCP — internet scanner classification (free tier with key)

IPQualityScore MCP — wraps the IPQualityScore fraud-prevention API

MITRE ATT&CK MCP — STIX bundles from github.com/mitre/cti.

PhishTank MCP — wraps PhishTank API (checkurl.phishtank.com)

Security Feeds MCP.

SecurityTrails MCP — wraps SecurityTrails API (securitytrails.com)

ThreatFox MCP — abuse.ch indicator-of-compromise feed (free, key required)

Discover Playwright workflows, start runs, and inspect results in Playrunner Cloud.

Approved test intent, reviewed Playwright automation and run evidence, inside your editor.

Poly1305 hex length, input discarded

Poly1305 tag length, input discarded

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

Post-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.

PreClick scans links for threats and confirms intent match with high accuracy before agents click.

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

Free enterprise-grade due diligence for your app, run by your coding agent. Then the full SDLC.

Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.

Human QA on real phones and browsers for your coding agent. Pass/fail per step, with screenshots.

MCP server for Proofpoint Essentials -- MSP org, domain, user, licensing, and reporting management.

QRNG-seeded random bytes, seeds, and ML-KEM-768 keys with signed provenance receipts.