Security & Testing MCP Servers for Windsurf (legacy)

Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

AI agents use your Obsidian secrets by name — values never reach their context.

Mission Trust Graduation gate for Claude Desktop. Claude can do more for you once Mission decides what it's allowed to do.

TestingBot's official MCP Server for AI-powered testing automation

A Model-Context-Protocol (MCP) server for the Webvizio API

MCP server for Google Cloud Armor WAF log patrol: deny summaries and false-positive checks

AI agent tools for Open Security Controls Assessment Language (OSCAL).

Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents.

Signed sandbox verdicts on any artifact, plus an agent marketplace. No key, no signup, no payment.

Attestari's verdict on an npm or PyPI package version, asked before an agent installs it.

EU AI Act + Colorado AI Act compliance scoring. 87/100 in 60 seconds. Free local scan.

Allure TestOps MCP — projects, launches, test cases, test results via REST API.

Security scanning and threat detection for AI agents

Trust scoring, scam detection, and EAS attestations for ERC-8004 + x402 agents on Base.

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys

Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker

Scan what an AI agent running as you can reach; optionally verify which keys are live (x402).

Core MCP server for Electron Stagewright. Drive Electron apps the way Playwright drives browsers.

Offline MCP server: EU digital/data/cyber compliance full text (14 regs), verbatim + citations.

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.