Security & Testing MCP Servers for Zed

Cyber Essentials Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

Gitleaks Cloud - GitHub API Key Hunter & Secret Scanner

Bitcoin-anchored, tamper-evident audit-permanence layer for AI agents, FRE 902(13)/(14)-shaped.

Agents that test your web and mobile app like real users, on every pull request.

Inspection, steganography and forensics API for files and images. Bitcoin pay-per-use.

Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS

MCP server for Blumira SIEM — query findings, evidence, and detection data via the Blumira API.

Read-only MCP server for Inforcer M365 baseline governance, plus assessment and report runs.

Read-only risk tools: token screen, contract source, wallet. $0.10 USDC on Base.

AI agent security and governance. Register, verify, scan, and monitor agents.

Screen Base smart contracts and B20 tokens: free on-chain check, paid Flash Audit over x402 (USDC).

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

BugBug workflows for AI agents workflows for AI agents

Authenticated MCP server for ClearPolicy policy and compliance workflows.

Cybersecurity news & breach alerts: hacks, patches. Register in-session — free testnet funds.

Direct access to Cypress tests results and accessibility reports in your AI workflow.

AI-powered scam detection for suspicious texts, emails, and screenshots. US-focused.

Pre-flight MCP security. Blocks compromised deps + tool drift. HMAC-signed. Dredd judges.

Website security and compliance checks: headers, TLS, DNS, email, LGPD and pentest.

378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.

Etch is a signed audit chain for AI agent decisions, offline-verifiable against pinned public keys.