Security & Testing MCP Servers for Devin Desktop

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.

Reverse-engineering evidence from a running Windows process, not the binary on disk.

Scan a live web page for WCAG 2.1/2.2 AA issues with axe-core: score, grade, failing rules.

Inspect a public site's tracking signals, grade consent evidence, and get remediation playbooks.

Free scam checks for links, wallets, emails, and breach exposure. No signup.

Trust verdicts on repos, models, VS Code and Docker Desktop extensions and agent skills.

Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.

MCP server for RocketCyber Managed SOC — incidents, alerts, agents, and customer telemetry.

ROT47 charset transform length, input discarded

AI-native HTTP security testing MCP server — 17 tools with raw HTTP/1.1 + HTTP/2 control

S/MIME PKCS7 fence, body discarded

sanctions.io MCP — wraps the sanctions.io Screening API (api.sanctions.io)

Scam and phishing detection for AI agents: safe/warn/danger verdicts for URLs and messages.

Check a suspicious email, SMS, WhatsApp message or link for scam signals (Netherlands, Belgium).

Sanctions screening for AI agents: check a name against OFAC and EU lists. Free during launch.

Stateless PII redaction over MCP/REST. Free ≤1000 words or $0.01/call; file upload supported.

scrypt N cost band, value discarded

Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.