security-scan

2,822 MCP servers tagged security-scan, 720 up right now. Live servers first, then by uptime; never by payment.

ac.mizan/registry up 0 agent searches in 30 days
Looks up player ban records across hundreds of game community ban lists and Steam, including batch checks of up to 100 accounts.
ae.waggle/vera up 0 agent searches in 30 days
Searches Google, scrapes public pages, audits SEO and extracts contacts, products, places and transcripts from the open web.
ai.28in28/agent-service-desk up 0 agent searches in 30 days
Checks a domain's SPF, DKIM and DMARC email authentication, returns DNS fixes, and re-verifies the domain after changes.
ai.aislabs/cve up 0 agent searches in 30 days
Provides a daily ranking of CVEs by real exploitation data, with a free teaser and paid full lists and verdicts.
ai.bumit/verify-business up 0 agent searches in 30 days
Looks up and verifies Swiss companies via the commercial register, sanctions and FINMA data, with source provenance.
ai.certscore/mcp-light up 0 agent searches in 30 days
Scans a public website for pre-consent cookies, trackers, consent handling, privacy policy gaps, and HTTPS/TLS setup, returning findings…
ai.councilof/gspc-free up 0 agent searches in 30 days
Read-only access to a governance scoring board, card and capsule verification, Merkle inclusion proofs, and policy-based candidate routing.
ai.duskly/duskly up 0 agent searches in 30 days
Classifies photo edits for MLS disclosure rules, drafts disclosure text, checks listing status, and verifies image provenance metadata.
ai.greyridgesignals/tech-risk up 0 agent searches in 30 days
Audits MCP servers for tool-poisoning and prompt-injection, and offers Base chain, DeFi, and security lookups via paid or free tools.
ai.hanria/agent-mandate-check up 0 agent searches in 30 days
Checks a planned agent action against an operator-defined mandate, returning permit, deny or escalate, and validates mandate rules.
ai.hanria/check up 0 agent searches in 30 days
Checks proposed agent actions against operator-defined rules, returning permit, deny, or escalate with the matching clause, and validates…
ai.helixar/mcp up 0 agent searches in 30 days
Validates agent delegation chains for scope and expiry issues, and scans MCP servers or manifests for risk findings and a security brief.
ai.homouniversalis/cryptography-merkle-tree-rfc6962-jws-ed25519-es256-zero-knowledge-python-ast-code-audit-formal-verification-mutation-testing-reed-muller-multi-agent-deep-think-crucible-barycenter up 0 agent searches in 30 days
Audits Python code, verifies Merkle-tree notarization of text with PII stripping, and scores agent manifests and responses.
ai.homouniversalis/diamond-verifier up 0 agent searches in 30 days
Audits Python source for cryptographic and AST issues, notarizes text into Merkle audit trees, and simulates multi-agent LLM token and…
ai.kaiv/dependency-trust up 0 agent searches in 30 days
Lets agents check dependency trust by pulling licenses, CVE advisories, dependency graphs, version history, and OpenSSF Scorecard health.
ai.kernora/agent-sec up 0 agent searches in 30 days
Provides advisory security rules for AI coding agents, checking planned actions against curated OWASP/CWE-cited baselines before execution.
ai.migurei.pw/parallel-world up 0 agent searches in 30 days
Reads a site's public robots.txt to report which AI crawlers are allowed, and verifies bot IPs against published ranges.
ai.pigfox/pigfox-ai up 0 agent searches in 30 days
Scores a website's readiness for AI search by checking AI crawler access in robots.txt, llms.txt presence, and JSON-LD markup.
ai.pipefire/pipefire up 0 agent searches in 30 days
Checks and generates email authentication records (SPF, DKIM, DMARC, BIMI, MTA-STS), scans blacklists, and scores cold email drafts.
ai.powerline/email-tools up 0 agent searches in 30 days
Checks email deliverability via SPF, DKIM, DMARC, BIMI, MTA-STS, blacklists, header analysis and spam-word scanning.
ai.preclick/preclick-mcp up 0 agent searches in 30 days
Scans a URL for threats and checks whether it matches stated intent, returning a risk score and access guidance before an agent clicks.
ai.spotafraud/spotafraud up 0 agent searches in 30 days
Checks Australian .au domains for age, certificate history, lookalikes and fraud risk, returning an AI-generated verdict.
ai.ssid/ssid-mcp up 0 agent searches in 30 days
Looks up router default credentials, checks default-password compliance, and identifies MAC address vendors; corrections require Pro access.
ai.statemind/python-code-validator up 0 agent searches in 30 days
Validates Python source with lint, type checks, and security scans, and can run it in a sandbox or apply verified fixes.
ai.tachyo/token-safety up 0 agent searches in 30 days
Checks EVM and Solana tokens for rug-pull risks like honeypot behavior, mint authority, LP locks, and taxes, returning a 0-10 risk score.
ai.tensorfeed/mcp-server up 0 agent searches in 30 days
Provides AI model pricing, news, service status, benchmark and CVE/vulnerability lookups, plus paid signed verdicts for routing and…
ai.tokenos/contract-audit up 0 agent searches in 30 days
Runs a static heuristic scan on Solidity or Anchor contracts, returning severity-rated findings with line numbers, fixes, and a grade.
ai.tokenos/wallet-inspector up 0 agent searches in 30 days
Inspects Solana wallets and tokens: balances, holdings, transaction decoding, and heuristic rug-risk scoring for token mints.
ai.tunnelmind/data up 0 agent searches in 30 days
Query surveillance tracker data on domains, entities and receipts, run live domain probes for AI agent, robots and opt-out signals, and…
ai.webmatik/audit up 0 agent searches in 30 days
Starts and retrieves website audits covering SEO, Core Web Vitals, AI search readiness, accessibility, and security.
app.ip/ipinfo up 0 agent searches in 30 days
Returns the caller's public IP, ASN, approximate geolocation, timezone, headers, user-agent and connection security details.
app.malinois/scan up 0 agent searches in 30 days
Runs a passive outside-in security check on a live web app, returning a graded report and fix steps for exposed files and keys.
app.openkrill/cve up 0 agent searches in 30 days
Scores CVE severity and exploitation status, ranks CVE lists by urgency, and triages vulnerable dependencies from lock files.
app.openkrill/packages up 0 agent searches in 30 days
Checks npm and PyPI packages or package.json files for vulnerabilities, upkeep, deprecation and license, plus repository maintenance status.
app.openkrill/site-check up 0 agent searches in 30 days
Audits public web pages for SEO tags, AI crawler access, citation readiness, redirects, broken links, and landing page conversion issues.
app.rowb.ai-visibility/audit up 0 agent searches in 30 days
Audits a website's robots.txt AI-bot rules, llms.txt, structured data, meta tags and sitemap, returning a score and suggested fixes.
app.rowb.auth-posture/audit up 0 agent searches in 30 days
Audits an email domain for MX receiving, SPF/DMARC/DKIM spoofing protection, and disposable-address risk in one call.
app.subdomain/subdomains up 0 agent searches in 30 days
Lists or counts known subdomains of a domain using passive historical data, without active scanning.
app.toolvet/toolvet up 0 agent searches in 30 days
Lets an agent search, vet and check the status of paid APIs and MCP servers, including pricing, uptime and security reports.
app.vercel.automaton-tx-explainer/base-tools up 0 agent searches in 30 days
Inspects blockchain addresses, transactions, token approvals, contract risk flags and URLs for phishing across several EVM chains.
app.vercel.axiom-risk-mcp/solana-token-risk up 0 agent searches in 30 days
Offers free Solana SPL token risk previews (authority, liquidity, holder flags) and lists paid x402 USDC endpoints for full reports.
app.vercel.cloakcheck-wheat/cloakcheck up 0 agent searches in 30 days
Scans a single web page for hidden prompt-injection payloads, such as invisible unicode, aimed at hijacking AI agents that read it.
app.vercel.exploitwatch-kappa/exploitwatch up 0 agent searches in 30 days
Checks lists of software dependency or product names against CISA's Known Exploited Vulnerabilities feed to flag actively exploited issues.
app.vercel.stripecheckup/stripecheckup up 0 agent searches in 30 days
Scans pasted Stripe webhook and checkout code for common integration bugs and returns pattern-based findings.
app.vercel.triageshield/triageshield up 0 agent searches in 30 days
Checks file paths, line references, and function names in a vulnerability report against a GitHub repository's default branch.
bar.alerts/alertsbar up 0 agent searches in 30 days
Queries domain-level credential exposure counts and sampled metadata from breaches and infostealer data, without exposing credential values.
biz.sri-test/verifier up 0 agent searches in 30 days
Inspects a published MCP server's source code and reports its observed behavior, with findings tied to file and line references.
ca.airiskmanagement/shadow-ai-list up 0 agent searches in 30 days
Looks up AI tools by name or domain to get risk scores, and checks whether a domain is unsanctioned shadow AI traffic.
ca.arrowmem/arrowmem-mcp up 0 agent searches in 30 days
Provides Canadian public-sector data and privacy/security guidance, plus local machine checks for exposed services and self-hosted model…
ca.bakhour/profitcollector up 0 agent searches in 30 days
Offers pay-per-call DNS, TLS, security header, JWT, hashing, JSON and text utilities for developers and security checks.

Next (page 1 of 57)

All capabilities · Search instead

62033 servers
Last crawl: 2026-11-11T15:17:20.593Z
API base: https://api.lookupd.com
MCP URL: https://api.lookupd.com/mcp