Remote Servers

P

PackageGuard

DanKaten

x402-gated safety checker for npm/PyPI packages before you npm install / pip install

R

RugRadar

Darkjay123

Is this crypto token a scam? Rule-based checks on 64 networks, read-only, no wallet or API key

Payment identity intelligence for AI agents

Machine-verifiable authorization checks for autonomous AI agents

Complete domain email-auth audit in one call: SPF with RFC 7208 lookup counting, DKIM selector pr...

Strips EXIF, XMP, IPTC and GPS metadata from JPEG and PNG images in one call, with optional ICC p...

Persistent identity, email, saved accounts and scoped credentials for AI agents.

A

Agent Tested

agenttested.dev

Hands-on agent test results for small AI tools and MCP servers, live AI outages, malware name check

End-to-end encrypted messaging and work coordination for autonomous AI agents

A

ArchGraph

archgraph.dev

Code intelligence platform for AI agents. 20 tools for architecture, security and impact analysis

H

HALLUX

blvkware.dev

Check that a package, module or DOI exists before an agent installs, imports or cites it

TLS cert verdict (OK/WARN/CRITICAL/UNKNOWN) from the served chain: expiry, revocation, alerts

Call third-party APIs from agents without leaking secrets. SSRF blocked, per-key quotas

Czech KYC due diligence, paid tier extension: nominee, phoenix, risk timeline, watchlist

D

DomainRef - domain and email security check

domainref.dev

Pay-per-call domain and email security check: SPF, DKIM, DMARC, TLS, DNSSEC, BIMI, with exact fixes.

E

ecoa

ecoa.dev

Verificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.

E

email-intelligence

emailiq.dev

Email intelligence MCP: MX/SPF/DKIM/DMARC, score, enrichment. x402 on emailiq.dev/mcp

F

FixedIn

fixedin.dev

Actively exploited? End of life? Which version fixes it? CVE verdicts for server software

Pre-trade safety verdicts for agents: token rug/honeypot, calldata guard, wallet risk — signed x402

Solana pre-trade safety for agents: rug check, honeypot sell-sim, drainer scan, tx preflight

Security intelligence for AI agents. 27 x402 endpoints: honeypot, forensics, CAPTCHA, preflight

Ask whether npm packages are reviewed and greenflagged, audit a package.json, and request imports

Security research: MCP registries verify identity, not tool behavior. See gtfo.dev.

Identity and authorization in one system: allow, deny, the reason and a record

Known vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.

Trust scores and dated liveness/drift facts for MCP servers, from the lastseen.dev notary register.

P

Patchwire

monowire.dev

Hourly security advisories for JS, AI and web3 packages: ranges, fixes and exploit conditions

Is a phone number VoIP or a real carrier line? Line type, score and grade, free, no auth

Pay-per-call x402 DNS, WHOIS/RDAP, availability, email security, SSL check, CT subdomains

Proof of delivery for agent work: verify countersigned receipts and deliverable hashes. Free

Search packages across registries, and read their releases and CVEs

S

seekrit — secrets for agents

seekrit.dev

Encrypted store for API keys and database URLs your code needs. Use them without reading them

Send push to Android, iOS and the web, and ask a trusted phone to approve a login, from your agent

Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.

Mark: stamp files with a signed, timestamped provenance record. Hash locally; verify free

T

TAP Certified

theatlasproject.dev

Check if an AI agent is certified; list the TAP Registry and certifications. Free, read-only.

Launch check for AI-built apps: SAFE or DO NOT SHIP verdict, with evidence and paste-back fixes

W

WhiteIntel — Ownership Intelligence

whiteintel.dev

UBO, sanctions & ownership graph. 23 tools, 130.7M entities, 31 registries

Checks if an email/domain is disposable (temp-mail). x402-metered per call.

D

Datoka Agent

datoka-agent.bhazarstudio.workers.dev

Signed agent execution declarations. Free verification; issuance 0.002 USDC via x402 on Base.

B

Bonafido: Business Domain Verification API

cybermax.cybermax-tools.workers.dev

Bonafido: is a domain a real business site? Verdict, trust score, risk flags.

C

CyberMax Data

cybermax.cybermax-tools.workers.dev

Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

D

Deltawren

cybermax.cybermax-tools.workers.dev

Daily data feeds MCP: CISA KEV+EPSS, SEC Form 4, 10-K sections, domain ranks. Keys $19/mo.

D

DomainDNA

cybermax.cybermax-tools.workers.dev

Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

K

Kevscope

cybermax.cybermax-tools.workers.dev

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

K

Kevscope CVE Check

cybermax.cybermax-tools.workers.dev

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key

Base mainnet analysis: contract audits, transfer simulation, token pricing. Paid via x402

Email, DNS, SPF/DMARC, site contacts, Markdown, IBAN, Swedish validators. Pay per call (x402).

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools

Solana token rug/honeypot checks: free quick check; full score paid via x402 (USDC Solana/Base)

Solana token risk: free preview tools; paid x402 full reports (Solana; swap-guard also Base)

Verify Bitcoin PSBTs, addresses, and BIP380 descriptors; earn or spend WorkSats L402 bearer credits

Verify Bitcoin PSBTs, addresses, and descriptors; earn or spend WorkSats bearer credits

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report

AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties

Audit SPF, DKIM, DMARC, MX, BIMI, MTA-STS for a domain; score + grade. $0.003 USDC/call via x402

Disposable email checker: disposable, role, free-mail and look-alike flags. List-based, no MX.

C

CertGuard

certguard.mike-tusa.workers.dev

Free SSL/TLS certificate checker: expiry, chain trust, hostname match, TLS version, A/B/C/F grade

D

DnsGuard

dnsguard.mike-tusa.workers.dev

Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes.

G

GlyphGuard

glyphguard.mike-tusa.workers.dev

Find hidden Unicode (zero-width, bidi, tag payloads), homoglyphs and lookalike names in text.