MCP Servers

D

DevX Agent Hub

agents.madebydevx.com

x402 pay-per-call agent tools: token safety/honeypot check, speech to text, TTS, translate, OCR, web

M

Mail Security Tools

api.mailsecuritytools.com

DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).

MCP server for MailTempo's public free temporary email inboxes

M

MailVakt

mailvakt.com

Use when email lands in spam: audits SPF, DKIM, DMARC, MX and returns the DNS records to fix it

Stateless PII redaction over MCP/REST. Free up to 1000 words or $0.01 per call; file upload supported

M

Malwagon

malwagon.com

Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs

M

MandateShield AI Payment Evidence

mandateshield.com

Analyzes delegated AI payment authority and exposes supported Stripe/x402 evidence contracts

Vet any MCP server before you depend on it. Stamp: PASS, REVIEW, or BLOCK.

Observed facts on public MCP servers: protocol checks, tool changes, signed evidence. No verdicts.

Before you pay an endpoint you cannot vouch for: credit grade, drift and preflight.

Is this dependency current, licensed, deprecated, or already carrying a CVE?

Generates deterministic webhook HMAC-SHA256 fixtures and optionally verifies a supplied signature...

Monitoring for agencies: uptime, SSL, DNS, blocklists, AI visibility, MCP health. 8 no-auth tools

Risk checks for BNB Chain tokens, wallets and ERC-8004 AI agents before you pay or trade

E

esrp-oss-mcp-test

esrp.microsoft.com

The ESRP OSS MCP server exposes tools to discover and validate trusted Microsoft OSS packages

E

esrp-oss-mcp-test

microsoft.com

The ESRP OSS MCP server exposes tools to discover and validate trusted Microsoft OSS packages

Solana token risk verdicts, rug checks and outcome labels for AI agents. Pay-per-call x402 USDC

G

gridstamp

mnemopay.com

Cryptographic spatial proof-of-presence for AV fleets, logistics, AR. 91% spoof detection

D

Domain Health

modernmustardseed.com

Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers

M

MX Verdict

mxverdict.com

Free, read-only email and DNS checks: SPF, DKIM, DMARC, MX, DNS records, blocklists, domain health

P

public

myprivacyagent.com

Read-only opt-out guides, removal routes for 950+ data brokers, and privacy library search

Govern proposed Action Cards with Decision Receipts before developer-owned execution.

Search no-KYC exchanges, swaps, wallets and VPNs with privacy and safety grades

N

notolens

notolens.com

Brand protection: monitor domains, trademarks and app stores. Triage matches and track takedowns

Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate.

Pay-per-call safety guards for AI agents: injection, tool-call, signing, secret, x402-trust.

Free, no signup: per-app keys, allowed calls, approvals and an audit log for your API or model key

B

Bifrost

odingard.com

Query a company's Bifrost trust gateway: cited answers and approved actions with signed receipts

C

copass-local

olane.com

Local encryption and project setup plugin for Copass. Keys never leave your machine

C

cosync-local

olane.com

Local encryption and project setup plugin for CoSync. Keys never leave your machine

Onboard any applicant with one link: ID, credit, bank and income, court and police records.

Payment evidence and policy preflight, plus paid sanctions and company Evidence Provider checks.

Free token risk check (Base/Solana) + info on paid x402 reports. Not financial advice

Find lookalike domains of a brand's website and see which resolve and what they show.

Local-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs.

Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

O

OrionCMD Checks

api.orioncmd.com

Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402)

O

OSINTverse

osintverse.com

OSINT lookups across breach, people, domain, crypto, and image sources, paid per lookup

29 pay-per-call DNS, SEO, SSL, security, WHOIS, mail, and AI tools for AI agents. x402, no API key.

Payment firewall for x402: scans for replay, overpayment, PII/secret leaks, prompt-injection

Live DNS, email-auth and redirect checks, HTTP security headers, uptime history, PC hardware prices

P

pcrzero

pcrzero.com

Issue signed receipts for AI agent actions; verify any receipt offline - free, no account

Decision assurance for AI agents: an auditable action boundary and receipt before it acts

P

PO6 Mailbox

po6.com

Give AI agents secure access to your email via private aliases with dedicated mailbox storage.

The system of record for AI agent authority: playbooks, routed policy questions, reusable rules.

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

Free email checks: 24 blacklists, spoofing/BEC grade, redirect tracing, email spam test, WHOIS

P

Praxikon

praxikon.com

EU AI Act and GDPR checks with sources: classify an AI system, trace each duty, find the supervisor

P

PricklyMails

pricklymails.com

Verify email addresses before you send: honest verdicts, no address kept, EU-hosted.

Detect fake or manipulated product reviews from Amazon, Trustpilot, Google and Etsy.

Email, phone, domain, URL & OFAC verification; phishing and IBAN checks via x402.

Q

Quiet Failures

quietfailures.com

Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks

Free front-end security check for any website: a grade plus the secrets and keys it exposes

D

Dragons Eye Ransomware Claims

api.ransomware-tracker.com

Ransomware claim lookups, IOC and CVE intel, group intel, bulk checks and watch alerts (x402 USDC)

R

Real Crypto Signals: crypto scam warning lists

realcryptosignals.com

Check sites and firms against regulator scam warning lists: SEC, CFTC, AMF, FSMA, BaFin, AFM, CBI

R

Receipt Audit

receiptaudit.com

Checks receipts and invoices for AI generation, edits and resubmission, with proof you can re-check.

A memory your AI can prove and the market of the present tense. SHA-256, verifiable offline

Attack paths, scan findings and shadow AI for AI-native apps and their clouds; vet MCP servers

NIS2 tools: scope check, EU transposition, incident deadlines, and your own org's status (token)