Security MCP servers

IP lookup with VPN/Tor/datacenter flags, batch lookup, WHOIS (RDAP), DNS, reverse DNS, subnet math.

Is a trading bot legit? Sourced bot fact sheets, regulator scam records and on-chain results.

Autonomous x402 payment schema-escrow arbiter, spend firewall, failover & ERC-8004 Sybil oracle

Block an action a signed mandate does not permit: amount, payee, audience, currency, window, intent.

Verify an AI agent artifact: schema, emptiness, provenance and mandate authority, Ed25519-signed.

Argues against a security finding or a draft bug bounty report before you submit it.

Check if a signup email is disposable, free, an alias, testing, parked or unknown, with evidence.

Search and read Web3 security education articles and a 230-term glossary from Onchain Diary.

EOL dates, risk scores, CISA KEV exposure, SBOM audits and edge-device EOS for 500+ products.

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.

Doormat Capital's paid x402 safety tools (token scan, HTTP security headers) for AI agents.

Signed timestamp receipts for a SHA-256 hash. Send only the hash; we never see the document.

Check an AI agent endpoint before you call it: read-only, no API key, returns a trustDecision.

Spam, pitch and fraud screening for website forms. Sign up, wire forms, test and review.

Second opinion before an irreversible agent action; signed proofs, free verify, public ledger.

Free email checks: 24 blacklists, spoofing/BEC grade, redirect tracing, email spam test, WHOIS.

Bonafido: is a domain a real business site? Verdict, trust score, risk flags.

Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

Free crypto scam checks: token and contract risk, scam or sanctioned addresses, phishing links.

Check a live app you own for public databases, leaked keys and exposed files.

Live-checks whether a WordPress site is ready to be safely operated by AI agents.

Agent leases, signed receipts, watchdogs, and optional paid source-verification evidence.

Is this dependency current, licensed, deprecated, or already carrying a CVE?

Risk preflight for AI Agent tool actions and Polymarket settlement and execution checks.

DMARC-safe email forwarding for agents: aliases, DNS health checks, and MCP tools on your domains.

Free, read-only security scanner for remote MCP servers, before you connect them.

Email, phone, domain, URL & OFAC verification; phishing and IBAN checks via x402.

2,029 DISA STIG rules with official check/fix text, CCI mappings, and .ckl checklist export.