Tailscale MCP by usefulapi
Working · 420 msRead devices, users, keys, ACLs and DNS for a tailnet; manage devices, routes and auth keys.
633 servers in Security
Read devices, users, keys, ACLs and DNS for a tailnet; manage devices, routes and auth keys.
Free US data lookups: ZIP demographics, CISA KEV/EPSS CVEs, domain rank, county spending, recalls.
Read Kisi places, doors, users, groups, access rights and access logs (no unlocking).
Manage API keys, identities, permissions, rate-limit overrides and verification analytics.
Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections an.
Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.
Bonafido: is a domain a real business site? Verdict, trust score, risk flags.
Signed checks of x402 sellers on Base and remote MCP servers, before your agent pays.
Real-time MCP & A2A prompt-injection, jailbreak, and tool-schema poisoning firewall for AI agents.
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.
Agent Auto Log: MCP servers, skills and plugins, with an automatic log of every change.
Private SuperIntelligence by Mitosis Labs: define the term, see privacy layers, join the waitlist.
Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.

Website monitoring: uptime, checkout, SEO (Search Console, Bing), security, speed, DNS, compliance.
Pre-payment check for EVM/Solana addresses: ok/caution/block with reasons. By Crypto Money Maker
Pre-sign safety check for agent wallets: tx, EIP-712, EIP-7702, x402. By Crypto Money Maker
Find hidden Unicode (zero-width, bidi, tag payloads), homoglyphs and lookalike names in text.
Find hidden prompt-injection text: ASCII smuggling, zero-width/emoji stego, bidi, homoglyphs.
One API, all things verified — control, delegation, human approval, anti-impersonation.
Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.
378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.
Check a domain's email DNS, whether Gmail and Outlook accept its mail, and its registration.
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens. Free.

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
Domain threat checks, a 30-day domain watch, TLS/DNS/email-auth checks and a $2 site audit (x402).
Private SuperIntelligence by Mitosis Labs: define the term, see privacy layers, join the waitlist.