Security MCP servers

Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

Accountless pay-per-use sandbox execution, storage, locks, attestation and handoff; pay via x402.

Free IP risk and geolocation lookup: proxy, VPN and datacenter detection. No API key.

Check breach exposure for your verified email and check locally computed password hash prefixes.

Governed MCP front door to FLOCORE; write calls need human approval and signed receipts.

Pay-per-call x402 checks before an agent moves money: token safety, wallet risk, identifiers.

Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full

Is this dependency current, licensed, deprecated, or already carrying a CVE?

Document forensics: tamper/AI checks, fields, tables, identity, screening, tenders, citations.

SMS Verify: SMS Verify API is a secure and easy-to-integrate service that sends verification codes.

Verify Seal AI decision receipts: signed evidence anyone can check, no account needed.

Deterministic allow/require_approval/deny verdicts for agent actions, before they happen.

Email, phone, domain, URL & OFAC verification; phishing and IBAN checks via x402.

Check how many years of verifiable history a person has behind accounts they already own.

2,029 DISA STIG rules with official check/fix text, CCI mappings, and .ckl checklist export.

Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.

Free C2PA 2.4 triage and reproducible official trust snapshot. No media, keys, or payment.

Permission before writes. Gravity→DENYs→Session $0.25. Pilot $100; Gateway $299. Probe free.

Free catalog and 2,048-character secret-scan preview for Fabler's x402 agent tools on Base.

Trust infrastructure for AI agents: read a verifiable Trust Rating, claim an identity, earn a badge.

Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report.

Cloudflare Radar MCP — internet observatory (traffic, attacks, BGP, quality)

CIRCL Vulnerability-Lookup — aggregated vulnerability records

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Diff and poisoning detection for MCP servers: catch schema drift and prompt poisoning.

Check a site's TLS certificate and its domain registration expiry. Read-only, no sign-in.

Verify emails, validate phone numbers, look up carriers and score IP addresses.

Real-time B2B counterparty KYB, SSL, DNSSEC & DMARC/SPF trust verifier ($1 USDC).