A2a Auditor
Local installScans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
2,546 servers in Security
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
Query HackerTarget's free recon APIs: DNS lookup, reverse DNS, whois, geoIP, HTTP headers.
TLS certificate/cipher/protocol inspection
14 rules, four CISA attestation sections, one workflow file
Multitenant Streamable HTTP wrapper for the SentinelOne purple-mcp server.
DELBOY companion-MCP — neutral provenance/attestation layer for agentic finance. Witness only: signs
A sandboxed MCP tool for reverse engineering with multiple tool integrations
Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.
Premium agentic endpoint for darknet-address-filter-mcp.

Every CrowdStrike Falcon MSP operation, plus a Flight-Control-aware local store that answers
Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks
Doppler API: projects, configs, secrets listing and download. Needs service or personal token.
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
Finds the credential in your release workflow that expires before your next release
Detects database migration table locks, terraform cost leaks, and OWASP API flaws.
MCP server for Mailprotector — customers, domains, users, quarantine, allow/block rules for MSPs.
MCP server for Ironscales phishing incident management — incidents, mailboxes, and reporting.
Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.
Premium agentic endpoint for dan-jailbreak-filter-mcp.

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance
Password breach checks and identity security audits - no API key.
Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
Reads .mcp.json / .vscode/mcp.json / claude_desktop_config.json while you edit it and marks the line
Zero-Trust MCP gateway securing internal database tools behind an API key firewall.
Band-only age proofs over fixture attestations, sealed to one mandate; local only.