"Techniques for Detecting XSS and SQL Injection Vulnerabilities" matching MCP servers:

Enables local, deterministic review of GitHub and GitLab pull request diffs for secret leaks, OWASP injection issues, WCAG 2.2 AA/EU EAA accessibility gaps, EU AI Act transparency, and database RLS risks, producing risk scores, merge decisions, committable suggestions, and SARIF exports.

Provides AI assistants with locally bundled tools to explore NIST OSCAL models, retrieve schemas, list community resources, and generate valid OSCAL templates for governance, risk, and compliance workflows.

Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

Enables AI agents to create documents from templates, send them for legally valid Argentine electronic or digital signature, track status, download signed PDFs with audit certificates, and cryptographically verify signatures.

Deterministic US equity-compensation tax optimizer. Six tools cover ISO/AMT exercise scheduling, NSO sell-vs-hold, RSU vest-and-sell, single-stock concentration, protective put / zero-cost collar pricing, and Section 1202 QSBS qualification. Federal plus 50-state plus DC tax math.

Provides comprehensive GDPR compliance assessment tools for AI/ML systems, including lawful basis determination, DPIA generation, and data subject rights handling. It also crosswalks GDPR requirements to EU AI Act obligations with AI-specific considerations throughout.

A server for querying, practicing, and analyzing exam questions from Taiwan's national examinations, offering 20 tools including search, statute lookup, weak topic review, and readiness assessment.

eSignatures.com MCP: full control of contract content from your AI. Read and rewrite contracts and templates as Markdown, before and after sending. Send for signature, manage signers, create public signing links and track status. Hosted with OAuth, no install. Pay-per-use, no subscription.

Torify gives AI agents the Japanese locale primitives that standard libraries lack — imperial era date conversion (wareki), qualified invoice number validation with NTA registry lookup, corporate number lookup (法人番号), postal code resolution, name romanization (Hepburn), and kanji-to-kana conversion via Yahoo! JLP. 31 endpoints total. No authentication required for MCP. Pay-per-call $0.02/call via

Turn Claude into an ISO 27001 compliance assistant — controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.

Enables local security scanning and compliance gap analysis for code and text, detecting secrets, PII, and OWASP vulnerabilities, and assessing readiness across major frameworks like NCA, ISO 27001, NIST CSF, and SOC 2.

AgentBureau provides the legal and physical infrastructure for AI agents to operate within the German jurisdiction. We bridge the gap between digital intelligence and real-world action by providing "Embodiment-as-a-Service." Through our API, agents can perform legally binding actions—like sending faxes, mailing physical letters, issuing invoices, forming entire companies (GmbH/UG), ...

Enables an agent to map MITRE ATT&CK techniques and actors to mitigating NIST 800-53r5 controls and severity-ordered DISA STIG fix/check steps for target systems. It answers questions about STIG mitigations, technique attribution, and applicable benchmarks once its local knowledge base is installed.

Policy proxy that governs what AI assistants can reach and do: it refuses forbidden tool calls before the upstream is contacted, with per-user memory and a tamper-evident audit. Stops prompt-injection exfiltration and forbidden data combinations across connectors.

Enables AI agents to work with Italian FatturaPA electronic invoices and the SDI exchange system: extracting invoice data, running structural XML checks, detecting anomalies, aggregating multi-invoice reports, looking up SDI error codes offline, and verifying Italian or EU VAT numbers via VIES. Installs in one line and runs locally with fail-closed file access so untrusted documents can be processed safely.

Enables agents to audit and safeguard repositories by detecting dependency pinning issues, license compliance problems, hardcoded secrets, and dead code through MCP tools.

Enables LLMs to search Chinese statutes and verify legal citations locally, including detecting fabricated references in generated text. It supports natural-language queries, article lookup, and citation validation without registration, API keys, or network access.

Enables AI coding agents to generate LGPD-compliant cookie banners by detecting trackers in local projects, and to scan published sites for privacy violations, returning actionable results.

Enables construction permitting teams to analyze portfolios of active permits by ranking risk, detecting day-over-day changes, identifying systemic bottlenecks, and generating daily executive action plans. Also supports single-permit readiness audits, missing-document reports, blocker explanations, resubmission checklists, and semantic search over municipal requirements.

Scans project dependencies for license compliance, classifying 60+ licenses and detecting conflicts and copyleft risks.

An enterprise-grade MCP server that provides specialized tools for legal reasoning and analysis, automatically detecting legal domains and offering domain-specific guidance, templates, and citation formatting.

Adds a responsible-AI safety layer to any agent by exposing RAIL Score's evaluation, agent-guardrail, and compliance capabilities as MCP tools, enabling content scoring, injection detection, tool call evaluation, and DPDP compliance checks.

InvoiceXML brings e-invoice compliance to your AI agent. Create, validate, convert, render, and extract structured invoices across UBL (Peppol BIS Billing 3.0, used worldwide), CII, Factur-X, ZUGFeRD, and XRechnung, all checked against the EN 16931 standard and official Schematron rules. Ask your assistant to generate a compliant invoice, validate one for errors, or convert between formats, with n

MCP server exposing a parametric policy engine for evaluating, simulating, and managing rules, with dynamic plugin support for domain-specific calculations.

Enables AI agents to securely connect via OAuth 2.1 to a wealth-engineering platform for consolidated patrimony summaries, ownership-structure analysis, trust tracking, and beneficiary share allocation.

Enables sanctions, PEP, criminal, and adverse-media screening for individuals and entities, including broad watchlist checks across vessels and aircraft for AML/KYC compliance.

Cross-model evidence pipeline for financial filings and contracts, providing source-grounded claims with verification via MCP and REST, with x402 pay-per-call.

Provides programmatic access to UK legal documents with hybrid semantic search and Model Context Protocol integration for AI assistants.

MCP server for querying Glory trust products and corporate secretarial services. It enables users to search and retrieve detailed information about family trusts, employee trusts, and offshore company services across multiple jurisdictions.

Computes the sum of dictionary values for keys less than or equal to a given key, treating the dictionary as sorted by key order. Returns 0 for an empty dictionary or when no keys satisfy the condition.