Security & Testing MCP Servers for Zed

Is this name on Japan's MOF asset-freeze list? Hosted, list-change history kept. Reference only.

Generates unit tests for Python code with coverage before/after reports and concrete edge cases.

Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface

Check if a package or MCP server is safe before installing. Find tools, connectors, datasets.

GDPR/CCPA cookie consent: scan sites for cookies, track consent rates, generate privacy policies.

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

Signed, traced record of what an npm package or file attempts when run, network included. No key.

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

Agent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in output

Ensemble testing of web pages for accessibility, usability, and web standards

Scan code for Korean compliance risks — PIPA/Personal Information Protection Act, Network Act, Credit Info. Not legal advice.

Persist failure simulations. No external fault injection or transfers. Customer key required.

CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source.

Pre-launch website QA: deterministic rule-based scans, readiness score, and blockers for agents.

Trust scores and organic demand intelligence for x402 agents

Compliance lint for AI, scraping, and privacy law. Cited findings in 200 or more jurisdictions.

Agent-first US business trust registry with neutral Trust Cards and published evidence.

Verify photos are real camera captures, not AI: C2PA and RAW+JPEG forensics. OAuth or API key.

Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.

MCP server for Mailprotector — customers, domains, users, quarantine, allow/block rules for MSPs.

Check a live app you own for public databases, leaked keys and exposed files.