Security & Testing MCP Servers for Windsurf (legacy)

Live tech-stack scan of any public site — vendors, account IDs, scripts, JSON-LD. 2 tools.

Search and monitor bug bounty programs and audit contests across ten platforms.

A flock of AI users tests your deployed app and reports where real people get stuck, with fixes.

Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.

AI inventory and EU AI Act compliance. Find AI tools and use cases, check new AI uses before launch.

The Compliance Knowledge Marketplace. Accessible to people and AI. Find it on Complyzard.

Did it really happen? Independent signed receipts for AI agents: page, domain, email, heartbeat.

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

Free website check: HTTPS setup and security headers, scored with plain-English fixes. No account.

CSP-Report-Only directive count, value discarded

Self-healing CI tests and proof of work for AI agents

Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.

Is this website a scam? Dated, sourced fraud assessments of domains. Free, read-only, no key.

The DLP MCP provides the compliance violation in the one drive, google drive documents.

Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.

Audits AI-built websites for France and Belgium: cookies, GDPR, legal pages, exposed keys, security.

Public-repo MCP canary with spoofed private repository.id for owned-account registry fallback test.

Classify AI systems by EU AI Act risk tier, estimate fines, write Art. 50 notices, list deadlines.

Read-only MCP: free OpenAI security evidence ledger (55 fields) + SaaSDossier release register.

Premium agentic endpoint for data-diode-unidirectional-mcp.

Premium agentic endpoint for ddos-scrubbing-proxy-node-mcp.