Remote Servers

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers, with plain-English fixes

S

scorebadge

scorebadge.com

Free website score for speed, SEO, security and AI search readiness, with the fixes.

Manage compliance controls, policies, and audit readiness for SOC 2, HIPAA, ISO 27001 and more.

Provider Trust MCP: verify providers before agents trust them + CANON bulk registry lookup (x402).

Identity-first enterprise MCP gateway: per-call authorization, agent identity and audit trail

S

SelfBadge

selfbadge.com

Look up verified people on SelfBadge and tell them apart from namesakes.

Validate Amazonbot and Amzn-SearchBot IP addresses. Remote MCP validate_ip tool

Validate whether an IP address belongs to Applebot. Remote MCP server exposing a validate_ip tool

Validate Baiduspider IP addresses. Remote MCP validate_ip tool

Validate whether an IP address belongs to Bingbot. Remote MCP server exposing a validate_ip tool

Validate CommonCrawl CCBot IP addresses. Remote MCP validate_ip tool

Validate ClaudeBot and Claude-SearchBot IP addresses. Remote MCP validate_ip tool

Validate Cốc Cốc Bot IP addresses. Remote MCP validate_ip tool

Validate DuckDuckBot IP addresses. Remote MCP validate_ip tool

Validate whether an IP address belongs to Googlebot. Remote MCP server exposing a validate_ip tool

Validate Meta-ExternalAgent and Meta-WebIndexer IP addresses. Remote MCP validate_ip tool

Validate Naver Yeti IP addresses. Remote MCP validate_ip tool

Validate GPTBot and OAI-SearchBot IP addresses. Remote MCP validate_ip tool

Validate PerplexityBot IP addresses. Remote MCP validate_ip tool

Validate whether an IP address belongs to PetalBot. Remote MCP server exposing a validate_ip tool.

Validate whether an IP address belongs to SeznamBot. Remote MCP server exposing a validate_ip tool.

Validate Sogou Spider IP addresses. Remote MCP validate_ip tool.

Validate Yahoo! Slurp IP addresses. Remote MCP validate_ip tool.

Validate whether an IP address belongs to YandexBot. Remote MCP server exposing a validate_ip tool.

PCI ASV scanning: live prices, whether you need a scan, a free payment page check, signup links

Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers

Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade

An API that checks new signups for disposable emails and repeat accounts.

C

Cloud

skkkadoosh.com

Share the app you built with AI privately: one sign-in link, remove anyone at once

Hosted snapWONDERS MCP: hide files in images, reveal hidden content, analyse media, convert formats

S

SOC 2 Compared

soc2compared.com

Look up year-one SOC 2 platform prices at 25 employees and the audit firms that issue reports

Solana + Robinhood-Chain token safety & net-USD accumulation intel for trading agents

Mobile-network checks for AI agents: phone number, SIM swap, age and location (CAMARA)

Local checks for sudo, systemd, sshd, ufw, and secret leaks before an agent applies them

Per-SDK verdict matrix for signed A2A Agent Cards: which signatures verify in each SDK

Authority that widens on proven operator absence and collapses on return

Signed agent-incident classification vs PP-26-4396, with third-party notification receipts

Signed, auto-expiring hazard bulletins for tools and APIs, with pre-flight checks for agents.

Recall for agents: lot genealogy, exposure tracing, attested remedy. Containment is not remedy

Partition an agent fleet into reputation compartments with automatic firebreaks.

Parallel-burst abuse testing for agent APIs with replayable evidence packs

Cache guard: forced-private partitioning, TTL clamp, fingerprint diffing, exposure verdicts

Control-change detection, scope freeze, re-attestation ladder. Query $0.01, watch $4.99/mo

Binds delegated results to their arrival channel: provenance grades plus a grounded truth tier.

Signed verdict receipts recovering a fleet's gatekeeper category, plus appeal packets.

Emergent collusion leaves no agreement to find — it lives in the history

Concurrent two-client overlap probe proving MCP servers do not cross-deliver tool results.

Conflicts check and ethical walls: fingerprint register, gated consent, signed walls, breach query.

Pre-ingestion compatibility gate: type context by content, crossmatch before ingestion

Agent-speed defense for your own public surfaces: daily diff probes, per-identity verdicts.

Classify, declare, and bond agent payload crossings — filing, bond, signed entry receipts.

Compares declared agent access against actual enforcement per identity class, with drift watch.

Watches platforms for silent default-model changes, with signed attestations and session gating

Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.

Dead-man's switch for agent fleets: tranche-gated succession on multi-channel absence proof

In-band MCP sleeper sentinel — mid-session diff and quarantine inside your own client's session

Query-intent privacy for agents: threshold cloaking with signed exposure receipts

Personal-lock maintenance isolation for agent infrastructure: hasp-quorum refusal + try-start proof.

Three-leg MCP OAuth remediation verdicts, proven behaviourally against a canary server

Pre-connection collision audit for merged MCP toolboxes, trust-graded, with signed routing receipts