Security MCP servers

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

IP geolocation, security, ASN, abuse, time zones, astronomy, and user-agent parsing over stdio.

Find the Unicode that hides meaning: bidi controls, invisibles, homoglyphs and mixed scripts.

Detect hardcoded secrets in source and config. Reports masked previews, never the values.

Extract regular expressions from code, each with a ReDoS safety verdict.

Deterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.

Protect your AI agents and IDEs from malicious open-source packages.

Keep credentials out of AI coding agents with local approvals, scoped injection, and audit trails.

OS keychain secrets for AI coding agents, over MCP.

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

Rust MCP server and CLI for Tailscale devices, users, keys, policies, and auth.

Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.

Cryptographic spatial proof-of-presence for AV fleets, logistics, AR. 91% spoof detection.

Was this document edited, did its redactions hold, is it safe for a model to read — Tamperlens API.

A record of what an agent did that the agent cannot quietly rewrite, and a way for anyone to check.

Screens x402 payments before settlement for injected payee addresses and sellers who never deliver.

One-call trust check for any domain (A0-A4, verdict, signed) + fact passports; same tools as remote

Explain fraud verdicts with evidence, surface account rings, and see who has burned other operators.

Verify email addresses, clean lists, and audit a domain SPF, DKIM, DMARC and MX setup.

Check any MCP server or agent skill before installing: upkeep, real adoption, and OSV advisories.

Screen the counterparty of an x402 payment before an agent pays it. Runs offline by default.

Is this address safe to pay? OFAC sanctions, ERC-8004 reputation, contract analysis.

Governed access to private code for coding agents: policy, redaction, audit chain, provenance.

PII/secret redaction, email checks, sanctions screening and OSV vulnerability lookups for AI agents.

Check Proof of Process chains: record, file match, timestamps, registry. Never one verdict.

Local snapWONDERS MCP: hide, reveal, analyse and convert files on your own machine

Assess a domain, IP or ASN: mail and DNS security, certificates, routing and a report card.

See what's broken on a live website from the outside: errors, uptime, DNS, HTTPS, leaked files.