CVE intelligence, STRIDE, OWASP test cases via Ansvar Gateway. Cited, OAuth + paid.
Travel-compliance intelligence and curated booking for digital nomads and long-stay travellers.
Public phishing feed: suspicious/confirmed phishing URLs detected hourly. No auth, CC0.
IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.
Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.
AI-powered Hong Kong SFC regulatory intelligence. Bilingual EN/ZH compliance queries.
MCP server for FCA Handbook compliance analysis with verbatim citations.
Compliance evidence from AIops audit trails: HIPAA/PCI/SOC2/GDPR, OSCAL export, 19 tools.
AI smart contract forge — 8-agent security audits, generation, and compilation across 8 chains.
Read your 18 U.S.C. 2257 compliance records: what is outstanding, expiring, or certified.
Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
MCP server for VibeScan — scan projects for leaked secrets and security issues.
Local Windows management, diagnostics, security, cleanup, and optimization MCP server.
Security analysis for Aiken smart contracts on Cardano. 75 vulnerability detectors.
Multi-CI security scanner with a live threat-intel feed of compromised CI components.
Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains.
Scan website GDPR compliance: consent, privacy policy, trackers. Score 0-100. x402.
HTTP header analysis — security headers, cache, server detection. x402 micropayment.
Password strength scoring with entropy, crack time estimation, common password detection. x402.
Detect PII in text: emails, phones, SSNs, credit cards, IPs. Regex + Luhn. x402.
TCP port scanning — check open ports on any host. x402 micropayment.
SSL certificate check — validity, expiry, issuer, chain, grade. x402 micropayment.
Trust scoring for domains, wallets, APIs. SSL+DNS+WHOIS+headers. Score 0-100.
Test webhook endpoints — send requests, measure latency, validate responses. x402 micropayment.
About Security MCP servers
Security servers let agents take part in defensive work: scanning dependencies and containers, querying vulnerability databases and threat intelligence feeds, reading audit logs, managing secrets in vaults, checking identity and access configuration, and producing compliance evidence. Several wrap established tools so an assistant can run a scan and explain the findings in plain language.
These servers are powerful on both sides, so run them with the same controls you apply to the underlying tools: dedicated credentials, read-only where possible, and no production write access without a human in the loop. Prefer servers from the tool's own vendor or an established security team, and review what each tool sends to third-party services.