Security MCP Servers

PCI DSS v4.0.1 compliance scanner for Go payment services, delivered as an MCP server

Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them.

MCP server for AI-powered network scanning with Nmap. Port scanning, service detection, OS fingerprinting, and vulnerability scanning for AI agents. By Vorota AI.

CVE lookup via NIST NVD, CISA KEV, EPSS, and MITRE ATT&CK. 7 tools.

A Rust CLI and MCP server for X.509 certificate analysis, format conversion, and key verification. Reads certificates from PEM files or HTTPS endpoints. Validates TLS connections, checks revocation status, converts between PFX and PEM formats and integrates with AI-powered IDEs via the Model Context Protocol (MCP) and Vault.

Read-only MCP/agent-gateway readiness scanner — scores a repo across 7 security dimensions.

EU AI Act + Colorado AI Act compliance scoring. 87/100 in 60 seconds. Free local scan.

Crowdfunding on Ulule: submit a project proposal, then build its page, goal, images and rewards.

Read-only Sinthoma clinical connector: patients, sessions and prep; OAuth consent and audit.

Website flagged by security vendors? Free scan, then we send the removal requests for you (paid).

Write pages into your notes vault, search them, and publish one as a shareable link.

Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.

Search, read, and safely update Markdown notes in your connected Phasoric knowledge vaults.

Shared Markdown memory that every AI assistant can read and write. Hosted in the EU.

Audits AI-built websites for France and Belgium: cookies, GDPR, legal pages, exposed keys, security.

Rug pull risk and on-chain forensics for tokens on Solana and six EVM chains.

Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.

Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes.

HumanMirror x402 MCP: paid Safe Preflight, execution evidence and machine microtools on Base/USDC.

Checks whether a name is on the UN Security Council consolidated sanctions list, for compliance and

Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans.

Crypto intelligence: rug/scam scans for any token, verified whale flows, AI signals + track record

Saudi ZATCA e-invoicing Phase 2 compliance audit, invoice drafting, and CFO VAT analytics.

DomainDNA: a domain's tech stack, email security (MX/SPF/DMARC), TLS expiry and age in one record.