Security & Testing MCP Servers for VS Code

CSP-Report-Only directive count, value discarded

Self-healing CI tests and proof of work for AI agents

Search and read Cyber Library, a free structured cybersecurity knowledge base. Read-only, no auth.

Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.

Is this website a scam? Dated, sourced fraud assessments of domains. Free, read-only, no key.

Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

The DLP MCP provides the compliance violation in the one drive, google drive documents.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.

Audits AI-built websites for France and Belgium: cookies, GDPR, legal pages, exposed keys, security.

Public-repo MCP canary with spoofed private repository.id for owned-account registry fallback test.

Classify AI systems by EU AI Act risk tier, estimate fines, write Art. 50 notices, list deadlines.

Read-only MCP: free OpenAI security evidence ledger (55 fields) + SaaSDossier release register.

Premium agentic endpoint for data-diode-unidirectional-mcp.

Premium agentic endpoint for ddos-scrubbing-proxy-node-mcp.

Premium agentic endpoint for deepvoice-guard-mcp.

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.

Audits TLS/SSL handshake latency, HSTS headers, and HTTPS availability on the edge.

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

HMAC-SHA1 hex length, input discarded