IA-QA Security — 30 tools MCP Tools

• find_tool Read-only

  find tool

• prompt_injection_scan

  prompt injection scan

• guardrail_test

  guardrail test

• redact_pii

  redact pii

• secret_scan

  secret scan

• validate_agent_trajectory

  validate agent trajectory

• validate_mcp_response

  validate mcp response

• mcp_server_health_check

  mcp server health check

• mcp_server_evaluate

  mcp server evaluate

• toxicity_scan

  toxicity scan

• function_call_validate

  function call validate

• mcp_schema_lint

  mcp schema lint

• bias_detect

  bias detect

• shield_analyze

  shield analyze

• security_headers_check

  security headers check

• ssl_certificate_check

  ssl certificate check

• cors_test

  cors test

• cors_checker

  cors checker

• cookie_security_audit

  cookie security audit

• web_security_audit

  web security audit

• rate_tool

  rate tool

• decode_jwt

  decode jwt

• validate_url

  validate url

• http_status_lookup

  http status lookup

• parse_http_headers

  parse http headers

• detect_secrets

  detect secrets

• latency_benchmark

  latency benchmark

• hash_text

  hash text

• generate_password

  generate password

• generate_hmac

  generate hmac

This list was read from the server itself, by connecting to it and calling tools/list on 5 November 2026. It is what the server actually exposes, not what its listing claims.

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.