Security & Testing MCP Servers

MCP servers for security scanning, vulnerability testing, secrets management and QA automation. Each entry is scanned with the deterministic Capability-Flow Trust Model — grades are computed, never self-reported.

LION - Trend Intent MCP + Marketplace Visibility Audit Remote
A
https://gleaming-cassata-d41682.netlify.app/api/mcp?src=mcpregistry_domain_v1_1

x402-paid MCP data: trend feed + visibility audit. USDC/Base. No API key. No PII.

Security & Testing Score 97/100 0 findings Cap. Moderate
LION - Trend Intent MCP + Marketplace Visibility Audit Remote
A
https://gleaming-cassata-d41682.netlify.app/api/mcp?registry=domain_v1_1

x402-paid MCP data: trend feed + visibility audit. USDC/Base. No API key. No PII.

Security & Testing Score 97/100 0 findings Cap. Moderate
Lowtoxgear Scanner Remote
A
https://mcp-scan.lowtoxgear.com/mcp

Australian ingredient scanner MCP — 21k+ AU products, 237 chemical rules, 17 condition tags.

Security & Testing Score 97/100 0 findings Cap. Moderate
Mcp Remote
A
https://mcp.secdim.com/mcp

Personalised developer security learning pathways from SecDim's challenges and courses.

Security & Testing Score 97/100 0 findings Cap. Moderate
Seo Audit Remote
A
https://inxy.ai/api/mcp

Score any site or Shopify store for AEO/GEO/LLMO readiness — how likely AI search is to cite it.

Security & Testing Score 97/100 1 finding Cap. Moderate
Site Audit Remote
A
https://api.santosautomation.com/mcp

Website intelligence audits for AI agents: free preview plus x402-paid Agent Readiness scoring

Security & Testing Score 97/100 1 finding Cap. Moderate
Socket.dev Remote
A
https://mcp.socket.dev/

Hosted supply-chain security MCP server that scores npm/PyPI/Maven/Go packages for vulnerabilities, maintenance health and behavioral risk.

Security & Testing Score 97/100 0 findings Cap. Moderate
squirrelscan Remote
A
https://mcp.squirrelscan.com/mcp

Audit websites for SEO, performance, security, accessibility and agent experience issues.

Security & Testing Score 97/100 1 finding Cap. Moderate
Expo npm
A
expo-mcp

Local MCP capabilities provider for Expo

Security & Testing Score 96/100 0 findings 180k/wk Cap. Moderate
Xero npm
A
@xeroapi/xero-mcp-server

MCP server implementation for Xero integration

Security & Testing Score 96/100 1 finding 5.3k/wk Cap. Moderate
Mssql npm
A
mssql-mcp

MCP Server for MS SQL Server integration with Claude Desktop, Cursor, Windsurf and VS Code

Security & Testing Score 96/100 0 findings 907/wk Cap. Moderate
Cve npm
A
cve-mcp

CVE/vulnerability intelligence MCP server — 41 tools, 11 sources: NVD, EPSS, KEV, GHSA, OSV, Shodan, VulnCheck, Vulners, Nuclei, Metasploit, CIRCL, ATT&CK

Security & Testing Score 96/100 1 finding 582/wk Cap. Moderate
Netintel npm
A
netintel-mcp

MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments

Security & Testing Score 96/100 1 finding 543/wk Cap. Moderate
Osint 2 implementations
A
best: osint-mcp-server

OSINT intelligence MCP server — Shodan, VirusTotal, SecurityTrails, Censys, DNS, WHOIS, crt.sh, Wayback, BGP

Security & Testing Best score 96/100 7 findings 387/wk Cap. Moderate
Telesign npm
A
telesign-mcp

MCP server for TeleSign APIs - phone verification, intelligence, and messaging

Security & Testing Score 96/100 0 findings 377/wk Cap. Moderate
Cyreslab Circl Cve Search npm
A
@iflow-mcp/cyreslab-circl-cve-search-mcp-server

MCP server for accessing CIRCL CVE SEARCH API - search CVE data, vulnerabilities, and security information

Security & Testing Score 96/100 0 findings 371/wk Cap. Moderate
Marketnow npm
A
marketnow-mcp

MarketNow MCP Server v1.7.0 — Trust layer for agent commerce. 11 MCP tools: search_skills, get_skill, list_categories, get_manifest, get_install_command, verify_trust (ATC), verify_receipt (signed delivery proof), submit_skill (REAL submission via /api/su

Security & Testing Score 96/100 0 findings 305/wk Cap. Moderate
Wellness Air npm
A
wellness-air

Local-first air quality MCP for AI agents — AirGradient (open hardware), AirThings, PurpleAir, IQAir AirVisual, Awair. Correlate AQI with sleep, recovery, and wellness.

Security & Testing Score 96/100 0 findings 263/wk Cap. Moderate
Darknet npm
A
darknet-mcp-server

Dark web intelligence MCP server — HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis

Security & Testing Score 96/100 1 finding 186/wk Cap. Moderate
Cocaxcode Api Testing 2 implementations
A
best: @cocaxcode/api-testing-mcp

The most complete MCP server for API testing. 36 tools: HTTP requests (with token-optimized responses), assertions, request flows, OpenAPI import, mock data, load testing, collections, environments, native export/import, Postman import/export, cURL export

Security & Testing Best score 96/100 0 findings 162/wk Cap. Moderate
Zpl Engine npm
A
zpl-engine-mcp

MCP server for the ZPL stability engine — AIN bias detection & neutrality scoring for finance, gaming, AI/ML, security, crypto. 68 tools across 11 categories. Plug into Claude Desktop / Cursor / Windsurf in 10 seconds via `npx zpl-engine-mcp setup`. Free

Security & Testing Score 96/100 3 findings 142/wk Cap. Moderate
Garl Protocol npm
A
@garl-protocol/mcp-server

GARL Protocol MCP Server — cryptographic verification for AI agent actions. 29 named tools: submit signed Action Receipts (v0.1), query multi-dimensional Trust Vector, issue/verify/revoke capability tokens (JWT-shaped + ECDSA-secp256k1), Capability Gate p

Security & Testing Score 96/100 2 findings 141/wk Cap. Moderate
Shield 2 implementations
A
best: mcp-shield

Security scanner for MCP servers

Security & Testing Best score 96/100 1 finding 138/wk Cap. Moderate
Seo Audit Console npm
A
@houtini/seo-audit-console

The complete technical SEO audit at conversation speed: Google Search Console history + a first-party crawl + on-demand DataForSEO, merged into one prioritised audit inside Claude - 90 checks ranked by recoverable clicks, with paste-ready fixes, keyword a

Security & Testing Score 96/100 1 finding 127/wk Cap. Moderate