Security MCP servers

Public IP signals (cloud hosting, Tor exits) and Maskbreak API status for fraud checks.

x402 APIs for AI agents: bounty radar, honeypot scoring, verdicts. USDC on Base. Stable origin.

Use your OTPilot accounts (passwords, 2FA codes) to sign in and run commands, without seeing them.

Pay-per-call x402 agent tools (USDC): web reader, token/wallet/email/site checks, screenshots, PDFs.

Local MCP runtime for policy-governed, verified agent actions with durable receipts.

Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.

package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.

Ask the human for API keys in a browser page and write them to .env. The model only sees key names.

Verify an npm or PyPI package before install: advisories, install scripts, typosquats, repository.

Create-only, age-encrypted deposits of new logins and notes into Vaultwarden, without vault reads.

Grade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel.

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

Local MCP tools that keep secrets out of agent context: redact files, scan commits, verify webhooks.

Check if your exit IP works for ChatGPT, Claude, Gemini: ASN, proxy/IDC type, risk, AI availability

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.

Microsoft Entra SCIM 2.0 Provisioning API: user and group lifecycle, with a local mock.

Read, verify and export a tamper-evident log of what an AI agent did. Read-only.

Input firewall for AI agents: scan text and files before an agent reads them. Local, no network.

Scan prompts, tool definitions and model output for injection, and guard agent tool calls.

Move files off your computer into an E2E-encrypted vault, verified first. Decrypts locally.

Local execution gate: fixed deadlines, operator-only controls, read-only setup and readable denials.

Verify PDF signatures, detect tampering, and identify PDF/A and PAdES conformance levels.

Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.

Share agent skills across your team, scan them for risk, and track what's actually used.

Guardrail for AI agents on SQL Server: statement blocking, optional read-only mode and an audit log.

Audits any website for AI agent readiness and safety, scoring prompt injection risk and llms.txt.

Invisible per-recipient image watermarks. Mark one copy per recipient, then identify a leaked copy.