Security MCP servers

Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.

Bonafido: is a domain a real business site? Verdict, trust score, risk flags.

Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.

A real US mobile number that receives verification codes, by text or transcribed call.

Read-only EU sanctions preflight: screen names/IDs against EU list. Evidence, not a verdict.

Free IP risk and geolocation lookup: proxy, VPN and datacenter detection. No API key.

Governed MCP front door to FLOCORE; write calls need human approval and signed receipts.

Pay-per-call x402 checks before an agent moves money: token safety, wallet risk, identifiers.

Pre-payment merchant trust checks for x402 agents on Base and Solana.

Deterministic allow/require_approval/deny verdicts for agent actions, before they happen.

Check how many years of verifiable history a person has behind accounts they already own.

Score an IP, email, phone, domain or device for fraud in one call, with the signals behind it.

Zero-install security baseline for AI coding agents — OWASP/CWE-cited rules over MCP.

Zero-trust gateway for AI agents: score tool calls, verify agent cards, enforce policy, audit.

Encrypted store for API keys and database URLs your code needs. Use them without reading them.

Independent AI-agent reviews: trust checks, evidence scorecards, incident registry, recommendations.

Human verification CAPTCHA with visual and selective-listening audio challenges.

PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.

Pay-per-call website safety and URL checks for AI agents. USDC on Base via x402, no API keys.

Vet an agent skill before you install it: structure, triggers, secrets.

Check a site's TLS certificate and its domain registration expiry. Read-only, no sign-in.

Ask if an action is safe before your agent runs it: injection, shell, MCP installs. Free samples.

MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis

Verify emails, validate phone numbers, look up carriers and score IP addresses.

Email verification and domain intelligence for AI agents. MX, RDAP, SSL checks. 25 free credits.

VibeAudit (audit.al157.xyz) site overview: services, pricing, contact, CTA links. Read-only.

Magento Open Source, Adobe Commerce and Mage-OS releases, EOL, requirements, CVEs and patches

Kostenlose Sicherheits-Checks ohne Konto: SPF/DKIM/DMARC, Mails, Links, Webseiten, Passwort-Leaks.