Security & Testing MCP Servers for Windsurf (legacy)

Local aggregate test-history stability analysis without test names or raw result contents. Tools...

Inspect TLS certificates of a host: issuer, expiry, and SAN. No key required.

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs

All six agent guard suites in one local MCP server, with optional cloud intelligence.

Search the MITRE ATT&CK enterprise knowledge base for adversary techniques and tactics.

MCP server for searching and retrieving CVE vulnerability information from NVD

Scan local or remote hosts for open TCP ports. Runs locally.

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

MCP server for AlienVault OTX: pulses, indicators. Free key.

Local first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...

MCP server for Allure TestOps test cases and launches

Scan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings.

Security, cost, and health governance proxy for MCP infrastructure — three-layer detection engine (regex + schema + LLM), monorepo, corpus

iptables for MCP — blocks dangerous tool calls, scans for secrets, logs everything.

Suitest MCP server for IDE agents (Claude Code, Cursor, Codex) — generate, run, and publish QA tests from your editor. Includes blackbox

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

Trust score for AI-generated code: scan repos, guard agent file writes, get a 0-100 score.

Team secrets your AI agent can use but never read: encrypted in the repo, value-blind tools.

Check if a password has appeared in known breaches without sending the password. No key required.

Local-first PHI detection for source code, LLM prompts, logs, and analytics