Remote Servers

H

Hive Passport

srotzin

Hive Passport MCP

H

Hive Secrets

srotzin

Encrypted secret store and rotation for autonomous agent credentials

H

Hive Vault

srotzin

A2A ZK wallet recovery — guardian swarm, no seed phrase, HiveLaw enforcement

H

Hive Zk Attestation

srotzin

Zero-knowledge attestation for agent capability and trust score claims

H

HiveEcho

srotzin

Immutable event logging and audit trail for agent transactions

H

HiveTrust

srotzin

KYA identity verification, trust scoring, and performance bonds for AI agents

S

stampthisfile

stampthisfile

Timestamp files in Bitcoin (OpenTimestamps): send a hash, pay per hash with x402, get a proof.

A

Agent-Shield

startekenterprises-ai

Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection

C

Company filing and CVE evidence snapshots

Stavros65

Company filing/CVE snapshots, status and optional feedback. Remote MCP or local stdio. Free Phase A

S

stillos-kya

stillmarcus24

Counterparty due-diligence infrastructure: OFAC screening, on-chain risk, signed verdicts

T

Tech Ecosystem Analysis

apifyforge

Tech ecosystem analysis for AI agents and LLM workflows — maps technology relationships, tracks adoption curves, detects CVE vulnerabilities, and scores tech stack risk across 6 live data sources

X

xfa

xfa.tech

XFA's remote MCP server: query device posture, compliance, policies and CVEs. Read-only

L

leaks.md and confession.md

thechristianaicompany

Anonymous, encrypted disclosure of AI alignment and safety failures, with signed receipts

M

mcp-gateway

titus-civic

Identity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools

G

GAIP Trust & Assurance Agent

tjcgraham-rgb

Now part of GAIP Witness: verifies GAIP receipts; evidence packs and incident bundles.

T

Token Safety X402

Br0ski777

Token contract safety scanner (honeypot, tax, proxy, blacklist, risk score) — x402 micropayment API + MCP server for AI agents

T

Tokensafe

ampactor-labs

Quick safety screening for any Solana SPL token. Returns: risk score (0-100), risk level (LOW/MODERATE/HIGH/CRITICAL/EXTREME), human-readable summary, token name/symbol, whether authorities are renounced, trusted_authority (true when active authority belongs to a known issuer lik

S

SiteVitals

tom18a

Monitor website health, uptime, SEO, security and performance via your AI assistant

B

bridge-watch on-chain intelligence

agentsapi.top

Base on-chain address labels (eth-labels 104k category tags), tx explainer, clusters, CCTP USDC

I

ISMS Copilot

tristanroth1

The compliance specialist your AI calls: ISO 27001, SOC 2, GDPR, NIS 2, DORA and more

T

Trust Gate Mcp

CWNApps

Policy-gated AI decisions with Ed25519 cryptographic receipts. No receipt, no trust.

T

Trusteed

trusteed-io

CTEM for your Trusteed tenant: security summary, findings, compliance gaps, and scans via OAuth

D

domain-trust

trusterinfo

Website trust checks: 0-100 safety score, verdict and community reviews (truster.info)

T

Trustping

charlieSAX

Real-time entity verification API for AI agents. Verify emails, URLs, and domains before your agent acts on them. Returns trust scores (0-1), verdicts (pass/warn/fail), and detailed signals. Free tier (50 calls/day) + instant metered access for agents with wallets ($0.003/call)

A

Agent Skill & Config Security Audit

tylerscomic-lab

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

D

Dockerfile Security Audit

tylerscomic-lab

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

G

GitHub Actions Security Audit

tylerscomic-lab

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

M

MCP Trust & Tool-Poisoning Audit

tylerscomic-lab

Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.

N

npm Supply Chain Audit

tylerscomic-lab

Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.

P

PII & Secret Redactor

tylerscomic-lab

Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders

R

Regex Safety Audit

tylerscomic-lab

Detects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites

S

Secrets Leak Audit

tylerscomic-lab

Scan text and git diffs for committed credentials using real vendor key formats plus entropy

A

Atinamos Evidence

atinamos.co.uk

Read-only verification evidence for paid machine services and buyer policy checks

E

ERC-8126 Scan

cybercentry.co.uk

378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402

D

Docker Compose Audit

UnbearableDev

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

D

Dockerfile Audit

UnbearableDev

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

G

GitHub Actions Audit

UnbearableDev

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

I

IAC Audit Pack

UnbearableDev

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

K

Kubernetes Manifest Audit

UnbearableDev

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

D

Dependency Health MCP

ux-xd

Package alive? Verdict with evidence: deprecated, archived, stale or active; plus runtime EOL dates

F

Faro

vedux98

Verify URLs, payees, and messages before acting: red/yellow/green trust verdicts for agents

V

Verifa

Verifa-Solutions

Identity verification, document checks, sanctions and PEP screening, and case review as agent tools

V

Verify Action

Armada735

MCP server issuing HMAC-attested receipts for AI agent tool-call evidence (verify_action_receipt.v0 reference impl)

V

VEYA

veyanet

Check, limit, record and prove AI agent actions with 2-of-3 validators and onchain proofs

P

POPCORN MCP

violetclaire

Witness layer for agents: signed receipts binding a fingerprint to a witnessed time. $0.001

P

POPCORN Witness Verifier

violetclaire

MCP server for verifying receipts: POPCORN-WITNESS/2.0 signature, digest, and time. Free, read only

N

nulucre-wallet-reputation

vjshaw

Wallet trust scores for AI agents. Stellar, XRPL, EVM 81+ chains. OFAC sanctions. x402 payments

W

WHP Standing

wheelerhubbell

WHP Standing x402 on Base: evaluate, patch, ept/core 1 USDC; audit 2; priority 5; ping 0.10

M

mcp-whoisxmlapi

whois-api-llc

34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API

W

Wicked MCP

WickedAPI

Whole Wicked suite for agents: market data, SEC filings, wallet checks, risk, identity, memory

A

Agent Tools

WingedGuardian

9 utility tools for agents: DNS, WHOIS, email, IP, URL, headers, QR, text, tech. x402 on Base

S

Swamp

swampai.world

An open habitat where security agents register themselves, work in public, and rerun each other

R

robotbase-web3

wygogogo19

Agent MCP: 65 tools — 5-chain verification, risk, prediction & crypto trends, 17 web tools.

A

awc-agent-commons

wynnpay102-sys

Discover funded testnet tasks with deterministic on-chain acceptance and AWC utility rewards

C

chainverdict

chainverdict.xyz

Pay-per-call x402 checks before an agent moves money: token safety, wallet risk, identifiers

V

VITNA – Containment for rogue AI agents

costrinity.xyz

Guard wraps stdio MCP servers: risky calls wait for a person; no answer, no run. Remote: cooperative

T

Toll — coin and product checks on Robinhood Chain, Solana, BSC

t0ll.xyz

Is there a real product behind a coin? LARP checks plus bundles, snipers and dev records

T

Tereno on Base

tereno.xyz

Check a Base contract, transaction or web page before you act. Free pricing, paid per call in USDC

T

TWZRD Agent Intelligence

intel.twzrd.xyz

Pre-spend trust for AI agents that buy: check x402 services and product listings before paying.

D

dokimo-mcp

ypratap11

Verify AI-agent revenue by recomputing a Merkle proof and checking it against an on-chain anchor