MCP Servers

Pay-per-call x402 DNS, WHOIS/RDAP, availability, email security, SSL check, CT subdomains

Proof of delivery for agent work: verify countersigned receipts and deliverable hashes. Free

Search packages across registries, and read their releases and CVEs

S

seekrit (local crypto plane)

seekrit.dev

Zero-knowledge secrets manager — local crypto-plane MCP server: decrypts and injects secrets

S

seekrit — secrets for agents

seekrit.dev

Encrypted store for API keys and database URLs your code needs. Use them without reading them

Send push to Android, iOS and the web, and ask a trusted phone to approve a login, from your agent

Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.

Mark: stamp files with a signed, timestamped provenance record. Hash locally; verify free

T

TAP Certified

theatlasproject.dev

Check if an AI agent is certified; list the TAP Registry and certifications. Free, read-only.

Launch check for AI-built apps: SAFE or DO NOT SHIP verdict, with evidence and paste-back fixes

Audit Solidity and Rust smart contracts from your editor. Pays per audit in USDC over x402

W

WhiteIntel — Ownership Intelligence

whiteintel.dev

UBO, sanctions & ownership graph. 23 tools, 130.7M entities, 31 registries

Checks if an email/domain is disposable (temp-mail). x402-metered per call.

D

Datoka Agent

datoka-agent.bhazarstudio.workers.dev

Signed agent execution declarations. Free verification; issuance 0.002 USDC via x402 on Base.

B

Bonafido: Business Domain Verification API

cybermax.cybermax-tools.workers.dev

Bonafido: is a domain a real business site? Verdict, trust score, risk flags.

C

CyberMax Data

cybermax.cybermax-tools.workers.dev

Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

D

Deltawren

cybermax.cybermax-tools.workers.dev

Daily data feeds MCP: CISA KEV+EPSS, SEC Form 4, 10-K sections, domain ranks. Keys $19/mo.

D

DomainDNA

cybermax.cybermax-tools.workers.dev

Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

K

Kevscope

cybermax.cybermax-tools.workers.dev

CVE patch-priority API + MCP: CISA KEV, EPSS, CVSS, SSVC. Keys $19/mo; 200 free calls/day.

K

Kevscope CVE Check

cybermax.cybermax-tools.workers.dev

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key

Base mainnet analysis: contract audits, transfer simulation, token pricing. Paid via x402

Email, DNS, SPF/DMARC, site contacts, Markdown, IBAN, Swedish validators. Pay per call (x402).

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools

Solana token rug/honeypot checks: free quick check; full score paid via x402 (USDC Solana/Base)

Solana token risk: free preview tools; paid x402 full reports (Solana; swap-guard also Base)

Verify Bitcoin PSBTs, addresses, and BIP380 descriptors; earn or spend WorkSats L402 bearer credits

Verify Bitcoin PSBTs, addresses, and descriptors; earn or spend WorkSats bearer credits

35-probe LLM/agent security red-team scan (injection, jailbreak, MCP abuse) with report

AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties

Audit SPF, DKIM, DMARC, MX, BIMI, MTA-STS for a domain; score + grade. $0.003 USDC/call via x402

Disposable email checker: disposable, role, free-mail and look-alike flags. List-based, no MX.

C

CertGuard

certguard.mike-tusa.workers.dev

Free SSL/TLS certificate checker: expiry, chain trust, hostname match, TLS version, A/B/C/F grade

D

DnsGuard

dnsguard.mike-tusa.workers.dev

Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes.

G

GlyphGuard

glyphguard.mike-tusa.workers.dev

Find hidden Unicode (zero-width, bidi, tag payloads), homoglyphs and lookalike names in text.

H

HeaderGuard

headerguard.mike-tusa.workers.dev

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

M

MailAlign

mailalign.mike-tusa.workers.dev

Email header analyzer: SPF/DKIM/DMARC/ARC verdicts, domain alignment, hop delays. No lookups

S

SmuggleCheck

smugglecheck.mike-tusa.workers.dev

Find hidden prompt-injection text: ASCII smuggling, zero-width/emoji stego, bidi, homoglyphs

Pre-share scan of text for your terms and secrets/PII. x402 $0.005 USDC, Base. As is, no warranty.

Pay-per-call Base & Arc onchain facts for agents: address risk, USDC payment check, tx explain

Contact Verify (verify-x402). Basic $0.002, domain $0.02, sender $0.025.

Rug check & honeypot flags for Base/Solana tokens. Free preview; full $0.0009/token via x402

Taiwan's list of compliant virtual asset providers, fraud URL checks, and crypto tax estimates

Check website crawler settings, verify crawler IPs, submit to IndexNow, and run YouTube SEO checks

A

AI Crawler Index

www.pathwren.workers.dev

{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"whoami","arguments":{}}} free no key

C

Crawler IP Verifier - real Googlebot or fake

www.pathwren.workers.dev

{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"whoami","arguments":{}}} free no key

C

Crawler Log Triage

www.pathwren.workers.dev

{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"whoami","arguments":{}}} free no key

SPF, DKIM, DMARC, MTA-STS and domain-expiry checks for any domain, with SPF lookup counts

Pre-share scan of text for your terms and secrets/PII. x402 $0.005 USDC, Base. As is, no warranty.

Base token safety: one-call verdict, risk score, rug check, holders, momentum. x402 + free demo

A

AI-operated. DKIM key reader: free, no key, finds unknown selectors.

ai.rjhsignaltech.workers.dev

AI-operated. Free DKIM key reader: no key needed, finds unknown selectors

A

AI-operated. Email authentication reader: six free tools, no key, no signup.

ai.rjhsignaltech.workers.dev

AI-operated. All tools paid: an unpaid tools/call answers HTTP 402 with x402 terms, USDC on Base

Crypto scam checks (tokens, sites, wallets), chain reads, web page to Markdown, email checks

$0.01/call via x402: OFAC wallet screen, DNS, email auth, domain age, email verify, URL unshorten.

Pay-per-call (0.01 USDC, Base, x402): OFAC SDN wallet screen, DNS lookup, SPF/DMARC/DKIM check

Turn URLs, PDFs and DOCX into clean Markdown for agents, plus prompt-injection scanning

Public demo: evaluate AI-agent payment authorization and approval policy. No signing, no settlement

Read-only Solana and Robinhood Chain tools: wallet recovery, token safety, unlocks, upgrades, fees

F

fulcrum

Dewars30

AI governance MCP server for policy enforcement, cost control and observability

V

vigil-fraud-alert

dgtalquantumleap-ai

Proximity-based card fraud detection with AI risk scoring.

Base token risk screen: rug-pull liquidity, honeypots, copycats. Pay per call via x402 (USDC).