Free EU VAT (VIES) + pan-EU company data (10 registers), payable in EURC/USDC via x402.
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs).
Airport security wait times, forecasts, FAA delays, EES border queues and baggage stats.
Read-only discovery of Framekeep capabilities, security boundaries, and public resources.
Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.
Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
Italian tax + anti-fraud: CF, P.IVA, IBAN, ATECO, IMU, F24, FatturaPA, NIS2. 23 free + 5 with key.
Search 10k+ live cybersecurity jobs from 246 security companies, plus salary benchmarks and stats.
Search 136M+ US/CA B2B contacts free, verify emails free, get compliance verdicts. Pay per reveal.
Keyless x402 compliance on Base: $0.001 OFAC wallet screen, $0.05 pack, $0.95 company file.
Is this dependency current, licensed, deprecated, or already carrying a CVE?
Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate.
SVI scores and theme breakdowns by county and tract.
Environmental justice screening indicators, pollution burden, and demographic vulnerability.
SNAP participation, food insecurity indicators, and agricultural statistics.
Local-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs.
Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.
Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Live DNS, email-auth and redirect checks, HTTP security headers, uptime history, PC hardware prices.
Email, phone, domain, URL & OFAC verification; phishing and IBAN checks via x402.
Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.
Cybersecurity market intelligence: funding rounds, M&A, investors, valuations, corporate lineage.
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes.
About Security MCP servers
Security servers let agents take part in defensive work: scanning dependencies and containers, querying vulnerability databases and threat intelligence feeds, reading audit logs, managing secrets in vaults, checking identity and access configuration, and producing compliance evidence. Several wrap established tools so an assistant can run a scan and explain the findings in plain language.
These servers are powerful on both sides, so run them with the same controls you apply to the underlying tools: dedicated credentials, read-only where possible, and no production write access without a human in the loop. Prefer servers from the tool's own vendor or an established security team, and review what each tool sends to third-party services.