security-scan
2,822 MCP servers tagged security-scan, 720 up right now. Live servers first, then by uptime; never by payment.
- ca.ohey/research up 0 agent searches in 30 days
Query research on web malware, kits, ClickFix commands and EtherHiding smart contracts, with indicators of compromise and threat statistics.
- co.auditon/assessments up 0 agent searches in 30 days
Read-only access to vulnerability scan results: list endpoints and findings, inspect reports, and compare changes between scans.
- coffee.pwned/pwned-coffee up 0 agent searches in 30 days
Checks lockfiles and project config files against live security incidents, reporting affected packages, fixed versions, and CVE details.
- co.launchtrust/launchtrust up 0 agent searches in 30 days
Scans web apps for leaked secrets, exposed files, headers and privacy issues, and retrieves compliance rules and signed scan records.
- com.a2awire/data-cert-fr-advisory-national-cert-alert up 0 agent searches in 30 days
Pay-per-query access to CERT-FR (ANSSI) national security advisories and vulnerability alerts, plus a marketplace for hiring agents.
- com.a2awire/data-cisa-advisory-ics-security-alert up 0 agent searches in 30 days
Query CISA cybersecurity and ICS advisories, new CVEs and remediation guidance, paid per query with an in-session escrow.
- com.a2awire/data-cisa-known-exploited-vulnerability-catalog up 0 agent searches in 30 days
Query CISA known-exploited vulnerability alerts per call at 0.01 USDC; birth via one signed call, testnet funds, no API key for the preview.
- com.a2awire/data-cve-security-advisory-vulnerability-database up 0 agent searches in 30 days
Lets agents query NVD high and critical CVE security advisories per request, with a daily digest, under a per-query paid session.
- com.a2awire/data-debian-security-advisory-dsa-linux up 0 agent searches in 30 days
Provides per-query access to Debian Security Advisories and related agent registration, escrow funding, and job-board tools.
- com.a2awire/data-dependency-vulnerability-malicious-package-security up 0 agent searches in 30 days
Queries package dependency vulnerabilities and malicious-package advisories, with per-query pricing and a free preview.
- com.a2awire/data-exploit-db-exploit-database-proof-of-concept up 0 agent searches in 30 days
Lets agents query new public exploits and proof-of-concept code from Exploit-DB, with per-query paid access and a free preview.
- com.a2awire/data-go-vulnerability-golang-security up 0 agent searches in 30 days
Look up Go module vulnerabilities and fixed versions per query, with per-query USDC payment handled through a session funding flow.
- com.a2awire/data-rust-security-crate-vulnerability up 0 agent searches in 30 days
Query Rust crate security advisories for CVEs and patched versions, paid per query within a metered session with a free preview.
- com.a2awire/data-threat-research-unit42-malware-analysis up 0 agent searches in 30 days
Lets agents buy per-query access to Unit 42 malware analysis and threat research data, with a free preview and session-based USDC payments.
- com.a2awire/data-ubuntu-security-linux-vulnerability up 0 agent searches in 30 days
Queries Ubuntu Security Notices by CVE for patched package versions, billed per query through a paid session on a testnet.
- com.a2awire/data-windows-security-update-microsoft-cvrf up 0 agent searches in 30 days
Queries Microsoft MSRC Windows security update data, CVE rollups and Patch Tuesday info, via paid per-query sessions.
- com.achivx/stablescan up 0 agent searches in 30 days
Checks stablecoin wallet risk: token approvals, issuer freezes, OFAC sanctions, taint exposure, and recent transfers across seven chains.
- com.acidpeak/acidpeak up 0 agent searches in 30 days
Queries vulnerability intelligence to look up CVEs, exploitation evidence, fixes, and product matches, plus checks installed Linux package…
- co.macrocyber/attack-surface up 0 agent searches in 30 days
Scans public websites for exposed databases, keys and endpoints, and re-checks earlier reports to confirm which issues were fixed.
- com.aeoinspector/aeo-inspector up 0 agent searches in 30 days
Runs AEO scans, 16-engine AI visibility reports, and domain security and AEO audits with fixes, with paid tiers via x402 USDC.
- com.agentalog/meta-agent-tools up 0 agent searches in 30 days
Lets agents watch MCP servers, skills, packages and domains for changes, and read security reviews, dependency evidence and link feeds.
- com.agentavow/agentavow-trust up 0 agent searches in 30 days
Scores and verifies safety of MCP servers, packages, repos, and agents before connecting; returns trust verdicts and embeddable badges.
- com.agentfieldkit/kits up 0 agent searches in 30 days
Searches security advisories for agent stacks, checks components for vulnerabilities, and creates Stripe checkout links for purchasing kits.
- com.agentsiteaudit/agentsiteaudit up 0 agent searches in 30 days
Audits public web pages across security, SEO, TLS, performance, accessibility and more, returning fixes and before-and-after verification.
- com.aiwebsitesecurity/ai-website-security up 0 agent searches in 30 days
Checks a public website's HTTPS certificate, redirects, headers, and mixed content, and returns security offer details.
- com.allthepossibles/preflight up 0 agent searches in 30 days
Scans MCP servers, extensions, documents and structured outputs for security risks and hidden instructions before an agent uses them.
- com.apkcube/apkcube up 0 agent searches in 30 days
Searches Android apps, checks APK signing keys and scan results, and fetches verified APK download links and version history.
- com.appin60.contractlens-api/contractlens up 0 agent searches in 30 days
Checks EVM token and contract risk, classifies addresses, verifies x402 payability, and reports live gas on several chains.
- com.appin60.onekeyaway/control up 0 agent searches in 30 days
Maps who can change an EVM contract or Safe, such as proxy admin, owner, and signers, and sends email alerts when control changes.
- com.arcnautical/mcp up 0 agent searches in 30 days
Screens vessels by IMO for sanctions matches, ownership opacity and vetting grade, and scores route risk between ports.
- com.atkvn/security-checks up 0 agent searches in 30 days
Checks TLS certificates and post-quantum key exchange, tests and audits Wazuh rules, and scans PHP installs for PHP2Shell exposure.
- com.attackerview/website-security-check up 0 agent searches in 30 days
Lets an agent run a passive check of a domain's security headers, TLS, DNS and email authentication settings.
- com.audiscape.agentguard/agentguard up 0 agent searches in 30 days
Audits public domains for a score and grade, previews fixes, creates checkout links, and checks agent tool calls for loops before they run.
- com.a-upgradenet/aun up 0 agent searches in 30 days
Audits AI agent tool definitions, memory and on-chain data, and lets agents find or sell services via paid per-call APIs.
- com.authichain/authichain up 0 agent searches in 30 days
Verifies signed provenance records and attestations, runs an EU Digital Product Passport readiness questionnaire, and looks up registry…
- com.autosecurelogin/aya-scam-check up 0 agent searches in 30 days
Scores messages, emails, chats and links for scam patterns in English and Spanish using offline rules, without fetching external pages.
- com.axiorank/axiorank up 0 agent searches in 30 days
Scores and gates agent tool calls, verifies agent cards, manages policies and agent access, and searches audit logs and incidents.
- com.bonissystems/knox-anchor up 0 agent searches in 30 days
Records agent actions and file hashes to a Bitcoin-anchored tamper-evident log, and verifies anchored records and chain health.
- com.brainonbnb/bsc-token-preflight up 0 agent searches in 30 days
Pre-trade check of BNB Chain tokens for honeypot, rug-pull, and liquidity risk, using on-chain measurements with a detailed scan tool.
- com.brianbooms/quiet-menders up 0 agent searches in 30 days
Offers pay-per-call data lookups like weather, FX, DNS and TLS checks, plus prompt-injection scanning and endpoint liveness probes for…
- com.cabal-hunter.api/cabal-hunter up 0 agent searches in 30 days
Pre-trade risk checks for Solana token mints, flagging cabal, bundle, dump, deployer and honeypot signals plus wallet involvement.
- com.casco/cve-intelligence up 0 agent searches in 30 days
Look up CVEs, check package versions against OSV advisories, and track recent CVE updates without an API key.
- com.cautellus/scam-detection up 0 agent searches in 30 days
Scores URLs/domains and messages for phishing or scam risk, returning safe/warn/danger verdicts before an agent clicks or acts.
- com.chaink9/chaink9 up 0 agent searches in 30 days
Checks tokens on several EVM chains for trading traps by simulating buys, sells and transactions on forks, and reads stored risk verdicts.
- com.checkpoint402/checkpoint402 up 0 agent searches in 30 days
Provides paid per-call tools for transaction explanations, DeFi yields, token safety scores, OFAC screening, and SEC 8-K filings.
- com.clawhard/deadbolt up 1 agent search in 30 days
Audits Supabase/PostgreSQL tables for RLS gaps, open policies and grants, and returns fix SQL or read-only queries.
- com.clawhard/spill up 0 agent searches in 30 days
Scans pasted text for leaked API keys, tokens and passwords, checks which are live, and returns a redacted copy.
- com.clawhard/xray up 0 agent searches in 30 days
Scans text and files for hidden Unicode such as bidi overrides, look-alike letters, and smuggled ASCII payloads, reporting what it finds.
- com.cmdrvl/receipts up 0 agent searches in 30 days
Verifies claims against SEC CMBS and NPORT-P filings, returning per-claim statuses with citations for deals, loans and fund coupons.
- com.compliapi/screening up 0 agent searches in 30 days
Screens names, crypto addresses, emails, IDs, vessels, aircraft and countries against sanctions lists, and detects VPN use or IP…
Previous · Next (page 2 of 57)
All capabilities · Search instead
- 62033 servers
- Last crawl: 2026-11-11T15:38:39.561Z
- API base:
https://api.lookupd.com - MCP URL:
https://api.lookupd.com/mcp