Security MCP servers

Tor address validation and retrieval fixtures, with disclosed research logging.

Pre-share scan of text for your terms and secrets/PII. x402 $0.005 USDC, Base. As is, no warranty.

Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.

SPF, DKIM, DMARC, MTA-STS and domain-expiry checks for any domain, with SPF lookup counts.

Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.

Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.

Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.

One routable IPv6 per AI agent, verifiable from the DNS root. Keyless tools need no signup.

Verified AI voice-clone scam incidents, loss stats, and a family verification protocol. Keyless.

Runs an eight-stage isolation test against your staging Supabase and issues a signed attestation.

Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.

One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.

Open-source IP address and CIDR tools for network calculations and public IP lookup.

Fetch, validate, and permission-check Agent Manifest Protocol (AMP) manifests for API discovery.

Deterministic runtime enforcement of step order for AI agents: ALLOW/DENY before a step runs.

Production-safety audits for AI-generated code, with a fix for every finding.

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

Scan/purge hidden text & score web domains: TLS, DNS, headers, speed. Free scans, $0.01 actions.

Search packages across registries, and read their releases and CVEs.

Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers

Mark: stamp files with a signed, timestamped provenance record. Hash locally; verify free.

Propagation breaker: egress quarantine + fingerprint outbreak telemetry for fleets.

Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers.

Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.

Check any x402 endpoint before your AI agent pays it: trust grade, verdict, and hijack checks.

Solana SPL token risk checks: free preview tool plus links to paid x402 (USDC) full reports.

An API that checks new signups for disposable emails and repeat accounts.

Audit AI agents' tool calls, planning and memory; Base on-chain data; pay per call via x402.

Email deliverability check: MX, SPF, DKIM, DMARC, blacklists, MTA-STS, DNSSEC, BIMI. Graded, no key.