Remote Servers

Verify a vuln report's file/line/function claims against a real GitHub repo

Redact PII from text before it reaches a model. Nothing stored, no third-party AI.

Classify email addresses and domains by provider and type (business, personal, disposable).

AI-powered codebase analysis: call graphs, security, dead code, complexity. 150+ tools

KYC automation from authoritative public sources. Requires an Encompass licence.

E

ExpiryOwl

expiryowl.com

SSL certificate, domain expiry, DNS and uptime monitoring for web agencies, grouped by client

E

Exploit Intelligence Platform — CVE, Vulnerability and Exploit Database

exploit-intel.com

Real-time CVE, exploit and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)

F

FEDLIN Scanners

fedlin.com

Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP

F

Feranor Resilience

feranor.com

Scan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions

24 free tools: IP/VPN lookup, WHOIS, DNS, SPF/DMARC, site up/down, redirects, time zones. No key

Security intelligence for AI agents monitoring Ethereum before actions.

Guidance for answering vendor security questionnaires. Every result carries the page it came from

Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls

Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token

49 paid x402 tools for agents: sanctions, SEC filings, perps, yields, DeFi, gas, odds, audits.

Is a trading bot legit? Sourced bot fact sheets, regulator scam records, and on-chain results.

PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check

Remote enterprise management of Android devices and apps

Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

G

Grisoco AI security audits

grisoco.com

Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports

T

TechSpy

techspy.hi-daniel.com

Detect any website's tech stack, DNS and email security, subdomains and sitemap from your agent

Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals

Security reviews for coding agents: diffs checked against your org policy and live infrastructure

Paid tools for AI agents over x402: privacy scan, payment-address check, locks, seller marketplace

I

InboxGuards Email Check

api.inboxguardstest.com

Check emails before you send, and get a $1 SPF/DKIM/DMARC fix plan for your domain. Pay per call.

I

InboxVet

inboxvet.com

Verify emails (syntax, MX, SMTP mailbox, catch-all), test email DNS and check Spamhaus blocklists.

Governed email for agents: Gmail, M365 and IMAP; per-mailbox permissions, send allowlist, audit log

Free IP risk and geolocation lookup: proxy, VPN and datacenter detection. No API key

I

ISMS Directory

ismsdirectory.com

Read-only search of a curated directory of ISO 27001, SOC 2 and compliance services

S

Spam I Am: carrier spam label check

ismynumberspam.com

See if a phone number shows Spam Risk or Scam Likely on AT&T, Verizon and T-Mobile real phones.

Ask your security cameras anything and set up alert rules in a sentence. Built into Agent DVR

112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups

Typed-question decisions from Jev: classify, moderate, route models and guard tool calls

J

Jid: the trust API for AI agents

jid.com

Verify a business before an agent pays, signs or buys: registry-cited decision and signed receipt

Read-only EU sanctions preflight: screen names/IDs against EU list. Evidence, not a verdict

SMS Verify: SMS Verify API is a secure and easy-to-integrate service that sends verification codes

Verify the email instantly: Identify spam email while authenticating your users

An MCP server that provides an API to LLMs to manage their JumpCloud resources

Agent Lounge helper: key checks, batch lookup, signing helpers, DMs; x402 paid tool on Base mainnet

K

KEVWire

kevwire.com

Exploited vulnerabilities, critical CVEs, breaches and AI security incidents, with primary sources

Paid API bazaar for agents: seals, audits, wallet intel, codec ops. x402.

GDPR cookie banner any coding agent can install with no account: provision, snippet, scan, verify

K

Kodem

kodemsecurity.com

Ask about your Kodem Security data and act on findings in plain language, with your permissions

Safety checks for AI agents paying on Base: free SpendGuard, paid x402 token risk and preflight

33 paid x402 web/DNS/email/SSL checks for agents from $0.01 per call, plus 2 free tools.

Is this token a trap? Is this address safe to pay? Signed verdicts on Base and Ethereum.

Verify photos are real camera captures, not AI: C2PA and RAW+JPEG forensics. OAuth or API key

NIST 800-171 controls and 800-171A objectives, crosswalks, exact SPRS scoring, POA&M generation

2,029 DISA STIG rules with official check/fix text, CCI mappings, and .ckl checklist export

D

DevX Agent Hub

agents.madebydevx.com

x402 pay-per-call agent tools: token safety/honeypot check, speech to text, TTS, translate, OCR, web

M

Mail Security Tools

api.mailsecuritytools.com

DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).

MCP server for MailTempo's public free temporary email inboxes

M

MailVakt

mailvakt.com

Use when email lands in spam: audits SPF, DKIM, DMARC, MX and returns the DNS records to fix it

Stateless PII redaction over MCP/REST. Free up to 1000 words or $0.01 per call; file upload supported

M

Malwagon

malwagon.com

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs

M

MandateShield AI Payment Evidence

mandateshield.com

Analyzes delegated AI payment authority and exposes supported Stripe/x402 evidence contracts

Vet any MCP server before you depend on it. Stamp: PASS, REVIEW, or BLOCK.

Observed facts on public MCP servers: protocol checks, tool changes, signed evidence. No verdicts.

Before you pay an endpoint you cannot vouch for: credit grade, drift and preflight.

Is this dependency current, licensed, deprecated, or already carrying a CVE?