Security MCP servers

Score any public site's HTTPS, TLS certificate and security headers, with plain fixes. No auth.

IP lookup with VPN/Tor/datacenter flags, batch lookup, WHOIS (RDAP), DNS, reverse DNS, subnet math.

Score merchant domain, https URL, or 0x wallet trust before an agent pays. Does not send payments.

On-chain DeFi smart contract auditor, arbitrage scanner, and agent tollbooth via x402 on Base.

Technical SEO, passive security and page-delivery audits with evidence and suggested fixes.

Kostenlose Sicherheits-Checks ohne Konto: SPF/DKIM/DMARC, Mails, Links, Webseiten, Passwort-Leaks.

Email deliverability check: MX, SPF, DKIM, DMARC, blacklists, MTA-STS, DNSSEC, BIMI. Graded, no key.

Search and read Web3 security education articles and a 230-term glossary from Onchain Diary.

Tamper-evident evidence log: signed heads, proofs, and recording salted digests of your records.

Preflight a short or unknown URL before your agent fetches it. Returns next: fetch or skip.

Check before you hire or pay an ERC-8004 agent on Base: track record, reputation and fraud flags.

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.

Paid tools for AI agents over x402: privacy scan, payment-address check, locks, seller marketplace

Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.

Signed timestamp receipts for a SHA-256 hash. Send only the hash; we never see the document.

Domain exposures: breaches, infostealers, ULP heap, cookies. Counts and samples, free.

Second opinion before an irreversible agent action; signed proofs, free verify, public ledger.

Read-only EU sanctions preflight: screen names/IDs against EU list. Evidence, not a verdict.

Agents pay for work and prove it. Verified checks $0.15, recovery $1.00. USDC on Base via x402.

Agent leases, signed receipts, watchdogs, and optional paid source-verification evidence.

Domain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

DMARC-safe email forwarding for agents: aliases, DNS health checks, and MCP tools on your domains.

Email, phone, domain, URL & OFAC verification; phishing and IBAN checks via x402.

Execution graph of AWS: verified contracts, least-privilege IAM policies, pre-flight authorization.

Free, no-account verification of KeyHalve-sealed documents. Read-only; never receives keys.

Polish phone number lookup: who called, spam and scam checks, UKE DNO registry, CERT phishing stats

Adopt, read, verify and record an Open Entity identity (OEIS-1). No auth, no CAPTCHA.