Security MCP Servers

AI-powered DMARC and email authentication for AI agents

Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.

EU AI Act Art-14 runtime oversight: allow / flag / gate-to-human on an agent action, with receipt.

Nonprofit compliance rules for all 50 US states, each with its official citation and status

Query Truss threat intelligence via hosted MCP (OAuth). Growth+ plans.

Apiiro Application Security Posture Management (ASPM) tools for AI coding assistants.

Private projects, preflight, decisions, and handoffs that keep work continuous across AI tools.

Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.

Risk checks for BNB Chain tokens, wallets and ERC-8004 AI agents before you pay or trade.

Generate small-business compliance calendars and renewal checklists.

Deterministic axe-core accessibility scans (WCAG 2.1 AA, EN 301 549, PDF/UA) via your account.

Pay-per-call compliance lead scanners with free MCP discovery and x402 payments.

Toxicity scores (0-1) for text before an agent posts it. Perspective API compatible. No LLM.

Crypto marketing compliance rulesets over MCP: MiCA, FCA, GDPR, SEC, MAS, VARA. Not legal advice.

Premium agentic endpoint for ashrae-compliance-mcp.

Premium agentic endpoint for auth-sentinel-mcp.

Redacts common secrets, email addresses, and phone numbers.

Search and analyze massive log files effortlessly.

Explainable ALLOW/WARN/BLOCK risk decisions for AI agent actions before execution, signed as OAA.

Premium agentic endpoint for carbon-tax-compliance-mcp.

Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

OFAC, LEI, EU VAT, AI Act, and company compliance preflight for agents.

US company filing obligations, plus a 25-check bookkeeping diagnostic. Sourced, dated, no signup.

UK AI Regulation Compliance MCP. Automates audits against the UK AI White Paper five principles ...

Advisory policy preflight for AI-agent spend requests; never executes payments or accesses wallets.

Keep patient identifiers out of AI agent context — a local privacy boundary for healthcare agents.

UK Operator Licence, tachograph, drivers' hours, DVSA roadside checks for UK haulage operators a...

Pay-per-call compliance data: OFAC sanctions, merchant check, LEI, SEC, WHOIS, FX. x402 in USDC/XRP

Community-built, comprehensive MCP server for the SecurityScorecard API (unofficial).

Uptime, SSL, DNS and domain monitoring you can talk to from Claude or any MCP client.

Local secret guardrails: scan code, git changes and MCP configs for API keys; redact text

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

Independent uptime oracle for the x402 agent economy. Free probes, paid history via USDC on Base.

Offline MCP server: EU digital/data/cyber compliance full text (14 regs), verbatim + citations.

Due diligence & KYC: PEP, national and international sanctions (OFAC, UN, EU, UK, FBI, INTERPOL, FIN

A2A ZK wallet recovery — guardian swarm, no seed phrase, HiveLaw enforcement

DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).

EU Cyber Resilience Act (Regulation 2024/2847) compliance for AI agents. Product classification...

Building plan approvals, occupancy certificates, and municipal compliance readiness tools.

MCP server for static security analysis of Android application source code.

Solana address risk grades and token scans for AI agents. Pay-per-call via x402 (USDC on Base).

South African R638 Certificate of Acceptability (COA) food safety compliance and audit tools.

CIRCL Vulnerability-Lookup — aggregated vulnerability records

MSRC Windows updates: CVE rollups, Patch Tuesday. Register in-session — free testnet funds.

Stacks contract monitoring: add a watch in one line, get alerts. Hosted, browser sign-in.

OAuth Multi-LLM Orchestrator