Security & Testing MCP Servers for Windsurf (legacy)

SSH fingerprint hex shape, value discarded

SSL certificate check — validity, expiry, issuer, chain, grade. x402 micropayment.

SSRI sha384 digest shape, value discarded

Streebog-256 hex length, input discarded

AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

Public information MCP for Minna no Tester (Sukimalabo), a mutual-testing community that helps gather testers for Google Play closed tests.

Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.

Catches your AI coding agent when it games the tests - locked-test hashes, tamper detection.

MCP server for Teramind's insider-threat/employee-monitoring API (read-only, metadata-only surface).

Local QA workflows, test evidence, screenshot maps and confidence reports for AI coding agents.

Vet any MCP server before you depend on it. Stamp: PASS, REVIEW, or BLOCK.

SSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.

PII scanning and redaction receipts for LLM traces and tool payloads.

Free crypto scam checks: token and contract risk, scam or sanctioned addresses, phishing links.

Free OFAC SDN wallet screen + sample preview for AI agents on Base. Read-only, no payment surface.

Post-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify.

Verified AI voice-clone scam incidents, loss stats, and a family verification protocol. Keyless.

Trust scoring for domains, wallets, APIs. SSL+DNS+WHOIS+headers. Score 0-100.

CTEM for your Trusteed tenant: security summary, findings, compliance gaps, and scans via OAuth.

C2PA standard visual authenticity scanner and metadata auditor.