Security & Testing MCP Servers for Windsurf (legacy)

Pull one-time .env links from stubs.talix.app into a project. Returns key names, never values.

A chaos-engineering and resilience-testing toolkit for Model Context Protocol servers.

Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

Find leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions

Check from a screenshot that text is really visible to users. Local, offline OCR.

Is this product version FIPS 140-3 validated, in NIST's queue, or expiring? From NIST CMVP data.

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

MCP server that wraps Google's OSV-Scanner to scan Java projects for known vulnerabilities

Unified MCP server for the 12-spec Kinetic Gain Suite + DefenseTech 6-pack — 75 governance tools.

Lets an AI agent hand a secret to a person as a one-time link, with no way to read it back.

Steganography analysis MCP server — 128 tools, 17 categories. Image steganalysis, JPEG/F5/JSteg detection, audio steganography, video

Durable file-based OpenUI artifacts over MCP for Nuwax.

Load-test a URL, ping it by phase, ramp to find the capacity, compare runs: JSON reports, guardrails

MITM proxy manager with MCP integration

Obfuscate Python before shipping; reverse-map tracebacks with your AI agent. No phone-home.

Verify a SCITT receipt under a trust root you hold — offline, no backend, no key, no network

Score agent manifests, generate CI workflows, and pull Clarx scan findings into your IDE.

Autonomous AI pentesting with 200+ tools, exploit chaining, PoC validation, and credential-safe MCP server

VMware compliance scanning (CIS, vSphere SCG, GB/T 22239, PCI-DSS) with drift detection.

ARKO Model Context Protocol server — brings the ARKO security control engine into Claude Code, Cursor, and any MCP-compatible AI coding

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.