Security MCP servers

Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers.

Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.

Flags memecoins impersonating real brands, official tokens and tokenized stocks. Read-only.

SPF, DKIM, DMARC, MTA-STS and domain-expiry checks for any domain, with SPF lookup counts.

Quick HTTPS/SSL check of any website, cybersecurity glossary and KrakenShield prices.

Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.

Who is calling? Spam reports, a verdict and the business behind NL, BE and LU phone numbers.

Audit AI agents' tool calls, planning and memory; Base on-chain data; pay per call via x402.

One-call briefings for AI agents: dependency risk (KEV/EPSS), SEC companies, domains, US places.

Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.

Check a domain's DMARC, SPF and DKIM, build SPF records, explain bounces, read DMARC reports.

Website flagged by security vendors? Free scan, then we send the removal requests for you (paid).

Look up any domain, IP address or AS number: hosting, DNS, registration, email, TLS and headers.

29 free tools: DNS, email auth (SPF, DKIM, DMARC), TLS, headers, WHOIS, dev utils.

Production-safety audits for AI-generated code, with a fix for every finding.

Enforce AI agent API permissions, approvals and safe retries. Check the setup and audit every call.

Find lookalike domains of a brand's website and see which resolve and what they show.

Agent asks a person go/stop/wait before Slack, CRM or risky steps. $49 for 30 days.

PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps

Search packages across registries, and read their releases and CVEs.

MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + Base data

Prove a hidden value reached a threshold without revealing the value.

Pay-per-call DNS, WHOIS, domain age, TLS, email auth, blocklists, IP intel. Free samples.

Scans an MCP server for security gaps before your agent connects. Free tier, no signup.

Check a domain's public SPF, DMARC, MX and DKIM DNS records on demand. No account required.

Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.

An API that checks new signups for disposable emails and repeat accounts.

Country verification research, integration planning and synthetic tests. No live identity checks.