Security & Testing MCP Servers for Windsurf (legacy)

Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full

AlienVault OTX MCP — Open Threat Exchange (free with key)

On-chain provenance lookup for AnchorRegistry. Resolve AR-IDs, hashes, and full trees. Authless.

Apiiro Application Security Posture Management (ASPM) tools for AI coding assistants.

Argon2d encoded shape, input discarded

Argon2i encoded shape, input discarded

Zero-install remote MCP server for proof-of-existence file attestation.

Read token metadata, applications, audit logs, proxies and usage in the PCI vault.

bcrypt $2 hash shape, value discarded

Model Context Protocol server for Binary Ninja - enables seamless integration of Binary Ninja's capabilities with MCP clients

Biometric data privacy auditor ensuring Zero-Knowledge compliance.

Local read-only cyber evidence integrity checks and aggregate comparison (alpha).

Bonafido: is a domain a real business site? Verdict, trust score, risk flags.

Security gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.

Self-authenticating booking-request receipt anchored to the Knox chain; never represents a person.

Argues against a security finding or a draft bug bounty report before you submit it.

NAIC AI model bulletin adoption by state, with citations. Insurance AI compliance data.

AI-powered application security testing — scan APIs, discover endpoints, and find vulnerabilities.

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

bug-bounty-programs

Censys MCP — internet-scan search over the Censys Platform API (censys.com)