Security & Testing MCP Servers for Windsurf (legacy)

Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.

DORAOracle — 15 tools for DORA Art.5-32: risk register, ICT incidents, TLPT, third-party.

FeedOracle Trust Layer - 10-tool cross-server trust: signing, anchoring, verification.

Verify a vuln report's file/line/function claims against a real GitHub repo.

Prompt-injection scanning and safe webpage fetching for AI agents reading untrusted content.

Ubuntu security: USNs per CVE, patched versions. Register in-session — free testnet funds.

UPI ID OSINT - Phone to UPI VPAs + Bank Names (India)

PreClick scans links for threats and confirms intent match with high accuracy before agents click.

MCP server for Security

Compliance verdicts for AI-generated code. SOC 2, HIPAA, HITRUST for healthcare IT.

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.

Pay-per-call safety checks for AI agents: screen a crypto address or URL before you transact.

Abnormal Security email threats, cases, and reporting in your terminal and your AI agents.

QA + a11y scanner: walks your running app's real user flows and reports what's broken.

Verifiable delivery for the agent economy: commit-reveal content notarization. Sellers commit to a d

See which AI agent and MCP server talks to what on Windows, with a rule-based security verdict

Security scanner for AI agent skills and MCP servers

Scan skills, MCP configs, and agent content for injection and supply-chain risks. Offline, no LLM.

EU AI Act compliance MCP server — risk classification (with article citations), role-based obligation list…

Regulatory intelligence for AI agents across jurisdictions