Security MCP servers

Security intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.

Diagnose AI workflows for failure, security, and handoff risks — RED/AMBER/GREEN per node.

Solana token rug check before you buy: SAFE/CAUTION/DANGER from chain state, paid per call via x402.

EU compliance checks for AI agents: sanctions, company, VAT ID, IBAN, email. Pay per call.

Check if a counterparty is safe to pay: trust/risk score for AI agents. Scam/phishing screen.

Domain overviews for security and sales: registration, infrastructure, and risk signals.

Managed Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events.

Administer a FoxAuth OAuth 2.1 / OpenID Connect server: projects, apps, users, keys and settings.

Scan, fix and justify your application code until it is approved to ship.

HTTP, DNS, SSL, WHOIS, ping, security-header, SEO and AI-readiness checks for any website.

Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.

Ask Vulnify before an AI agent acts. Check, record, and read policy decisions.

OAuth website audits: security, SEO, AI visibility, integrations, accessibility and performance.

Hosted MCP servers for MSP tools: ConnectWise, NinjaOne, Microsoft 365, SentinelOne, Pax8 and more.

Monitor and manage email authentication (SPF, DKIM, DMARC, MTA-STS, BIMI) for your domains.

Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.

Threat intelligence: enrich IOCs (IP, domain, URL, hash), search CVEs and actors, scan SBOMs.

Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.

Brand protection: monitor domains, trademarks and app stores. Triage matches and track takedowns.

Controls for your own verified API: read events, block or release callers, tune route limits.

Invisible bot shield for HTML forms: the browser solves a proof of work and your server checks it.

Public data for agents: CVEs, SEC filings, housing, wildfire, contractor licenses, EPA labels.

DMARC analytics for AI assistants: SPF/DKIM, compliance, anomalies, p=reject readiness, onboarding.

Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.

Shopify store security: find risky scripts and apps, and turn them off from your AI agent.

Verify emails (syntax, MX, SMTP mailbox, catch-all), test email DNS and check Spamhaus blocklists.

Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.

Zero-knowledge proofs with post-quantum attestations for AI agents, without exposing personal data