Security MCP servers

Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding

DeFi smart contract forensic auditor and vulnerability scanner.

Cookie consent scanner: GDPR, CCPA, GCMv2. PASS/FAIL compliance checklists with fix recommendations.

Enrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.

Scan a GitHub repo for leaked secrets and open databases, from inside your editor. Public repos are free and need no account.

HackZero for Claude Code, Cursor and Codex (beta): SOC 2 evidence collection AND pentest triage, with your own key, on your own machine.

Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full

CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.

x402 CVE triage MCP: EPSS + CISA KEV -> exploit priority, $0.01 per query.

Assess a domain, IP or ASN: mail and DNS security, certificates, routing and a report card.

CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.

Validated API and app vulnerability findings with remediation guidance.

Paid trader skills MCP. Coil scanner with dated 252d forward-return evidence. x402 USDC.

OSINT dark web database search tool detecting credential leaks.

Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.

Delinea Secret Server API: secrets search and retrieval.

Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.

Diamonize LSA MCP server — military-grade zero-trust endpoint security. Deep scan IPs and files for malware, keyloggers, and unauthorized memory access. Part of the J&K Go-Green Tech Suite.

DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.

Search 30,000+ decided U.S. DOHA security-clearance decisions, cited to the public record.

WHOIS, DNS, SSL, IP geo for security forensics and OSINT — separate from SEO.

Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

Doppler API: projects, configs, secrets.

Identity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools.

Environmental justice screening indicators, pollution burden, and demographic vulnerability

Live Solana bounties from Superteam Earn: search, details, open feeds. No API key.

Options-implied earnings moves, 10y implied-vs-actual history, IV rush/crush, scanner, simulator.

Verificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.

Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)

Spanish public property auctions (judicial, AEAT, Social Security): daily data and risk flags.

Paid email, DNS, mail-security and RDAP intelligence for agents over x402.

Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.

70+ pay-per-call security, crypto, and data tools for AI agents via x402 USDC micropayments on Base

Runtime AI-threat screening for coding agents: analyze, scan tool calls/outputs & docs (paid).

Read-only MCP: free OpenAI security evidence ledger (55 fields) + SaaSDossier release register.

Premium agentic endpoint for darkweb-threat-feed-mcp.

Premium agentic endpoint for delegatecall-vulnerability-mcp.

Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.

Fallax is a phishing simulation and security awareness training platform. Read your results.

Diagnose AI workflows for failure, security, and handoff risks — RED/AMBER/GREEN per node.

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.

Guidance for answering vendor security questionnaires. Every result carries the page it came from.

Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys

Security scanner for n8n workflows + live MCP Trust-Check. 18 rules, OWASP mapped. Paid x402 API.

Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

Read-only discovery of Framekeep capabilities, security boundaries, and public resources.

WAF security testing: 5,500+ payloads, 25 WAF fingerprints, 21 recon checks, bypass AI

44 calculators for AI agents: US tax, finance, business + an MCP engineering & security suite.