Security MCP servers

Free proxy list, live proxy checker and IP lookup for AI agents. No key, nothing to install.

Inspect one endpoint's served certificate, expiry, hostname coverage, and accepted TLS versions.

Korean ID document verification and PII masking APIs

{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"whoami","arguments":{}}} free no key

DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

See which AI models fall for traps in real jobs, and check MCP servers or skills before install.

See if a phone number shows Spam Risk or Scam Likely on AT&T, Verizon and T-Mobile real phones.

Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans

Decentralized E2EE P2P file transfer + chat: human to human, human to AI, AI to AI. No accounts.

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.

Mint an agent identity in two free calls. Verify anyone. Earn 75% when someone reads you.

Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.

12 synthetic moderation case exception cases: duplicate payouts, offender hold list entries, missing

12 synthetic access change request exception cases: duplicate payments, policy-watch list entries, m

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.

Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.

Scan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions.

Provider Trust MCP: verify providers before agents trust them + CANON bulk registry lookup (x402).

Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.

Pre-flight verdict on MCP servers: known-bad identity, CVEs, dependency tree, tool drift. Signed.

Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes.

One routable IPv6 per AI agent, verifiable from the DNS root. Keyless tools need no signup.

Companies House, Gazette notices, sanctions screening, LEIs and UK legislation.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Runs an eight-stage isolation test against your staging Supabase and issues a signed attestation.

Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.

Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.