"How to replicate or copy website functionality" matching MCP servers:

An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.

Provides a 'scan_website' tool to analyze target websites for security vulnerabilities by consuming the Website Security Auditor REST API.

Enables AI agents to run domain and website intelligence checks, including WHOIS/RDAP, DNS and email security, TLS headers, subdomains, tech stack, contacts, SEO, Core Web Vitals, sitemaps, and Wayback page diffs, using the caller's own Apify token.

Enables AI agents to access only task-relevant data with secrets hidden and personal details pseudonymized, while enforcing destination policies to prevent data leakage even under prompt injection.

Release gate agents call before they tell users a public website is ready to ship. Scans public websites across security, SEO, accessibility, legal compliance, and sustainability.

Scan any project or website for privacy compliance issues directly in your AI coding tool. Detects tracking tech, cookies, and third-party data collection. Works in Claude Code, Cursor, and Windsurf.

Diagnoses a domain's email authentication — SPF, DMARC, DKIM, MX, blacklists and domain or SSL expiry - and returns copy-paste fix records generated by a validating engine, never a language model. The MCP server is hosted remotely; this repository carries the plugin manifest, connector config and bundled skill.

Hand a secret to another agent as an encrypted, pay-per-read token delivered exactly once, leaving no copy behind. Also pre-flights an x402 endpoint before your agent pays it. Runs locally over stdio and encrypts in your own process, so there is no hosted version to hand your plaintext to.

Enables AI clients to run comprehensive website scans for security, accessibility, performance, and SEO using the AcuityScan API.

Enables AI agents to permanently remove personally identifiable information from PDF documents, returning redacted files with the sensitive text deleted rather than merely covered. Supports scanned documents, multiple languages, entity types, and optional human review.

Audit any website for privacy, security, accessibility, and performance issues — with scores, grades, and actionable fix instructions. No account required.

Enables an AI assistant to redact text and, more importantly, files without reading them, since file redaction and restoration happen locally and only counts are reported, keeping personal data out of the conversation. It exposes tools for redacting text, writing a redacted copy of a UTF-8 file with an owner-only restore mapping, and putting original values back offline.

Enables AI agents to explore licensed IP intelligence databases through four read-only tools: listing the databases an organization is licensed for, inspecting a database's columns, sample rows, row count and build date, fetching published checksums for verifying a local copy, and reviewing recent download attempts. It covers VPN, proxy, hosting, CDN and relay address space data without transferring the multi-gigabyte files themselves.

Sanitizes text and files by removing PII, secrets, and custom patterns locally before sending to LLMs, with optional reverse-scrubbing.

Enables live website health checks including TLS, HTTPS, and security headers, returning an A-F grade with specific fixes.

Enables Claude to scan a website's HTTP security headers and receive an A–F grade against OWASP best practices, including per-header pass/warn/fail results and copy-paste fixes for missing headers.

A demonstration server that reveals security risks by accessing sensitive environment variables, illustrating how MCP tools can potentially leak user data without explicit consent.

Enables any MCP client to look up CVE intelligence — severity summaries, filtered searches, and full per-CVE detail fusing NVD, MITRE-CNA pre-NVD, CISA KEV, EPSS, and GitHub GHSA data — alongside a Shodan-derived internet-exposure footprint showing how many internet-facing services run a version mapping to a given CVE. It is free, keyless, and read-only, and distinguishes verified zeros from unassessed or failed lookups.

Enables plain-English website security checks from an MCP client, offering tools to assess site findings, explain individual issues, and list all available security checks.

Transparent Go proxy that intercepts, signs, rate-limits, redacts, and audits all MCP JSON-RPC tool calls without modifying client or server. Stores to JSONL or SQLite with HMAC-SHA256 signatures.