"Security" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Prompt-injection shield for agents: read pages, scan content, audit MCP servers and skills. x402.
Pay-per-call x402 API for AI trading agents: pre-trade security checks, Polymarket & HIP-4 odds.
CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source.
Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.
Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers.
VAREXIS-INDEX — Source-Linked Evidence & Verification Tools for AI Agents VAREXIS-INDEX provides free, source-linked evidence for agent decisions through twelve focused guides and two distinct read-only MCP connectors. The original `/mcp` connector covers the approved search and preview population. The companion `/mcp/catalogue` provides deterministic access to 696 additional records by category and exact identifier. Configure both through the existing quickstart: https://varexis.tech/index-connect#quickstart Four optional one-time local checkers analyse supported customer-supplied declarations: Tool Admission £49, Audit Coverage £79, Data Exit £79 and Transaction Integrity £149, excluding VAT. These products do not independently inspect live systems, enforce permissions, establish payment settlement, verify deletion or certify compliance. Twelve free decision guides: https://varexis.tech/index-packs#free-decision-guides Read-only agent enquiry navigation (12 guides, 99 referenced records): https://varexis.tech/varexis-index/agent-entry.json Select a candidate guide, then follow the exact connector tool and identifier in the canonical manifest. Navigation does not establish applicability, a customer outcome or authority to act. Evaluate agent permissions, delegated authority, audit provenance, payment integrity, data retention and software supply-chain evidence before relying on documented claims. **FREE MCP CONNECTOR** Endpoint: https://varexis.tech/mcp Connect using Streamable HTTP. No authentication is required for public evidence discovery. Four free, read-only tools: - find_evidence_questions — Find existing reviewed evidence questions and matching routes. - preview_evidence_answer — Retrieve complete supported public answers, sources, limitations and snapshot hashes. - find_package_advisories — Find source-bound software advisory records. - get_index_access_options — Discover available services, pricing, licensing and purchasing requirements. Public MCP cannot execute actions, inspect private systems or authorise deployment. Developer quickstart: https://varexis.tech/index-connect **LICENSED VERIFICATION TOOLS** Four separately licensed, reusable local executables: **1. Agent Tool Admission & Permission Control — £49** Compare declared tool actions, resources, recipients and permissions across supported GitHub, Playwright, Notion and Slack integrations. Identify authority conflicts, missing verification and permission changes before human review. **2. Agent Audit & Evidence Coverage — £79** Reconcile declared identities, authorisations, actions and outcomes. Identify missing audit events, inconsistent references and unresolved export, retention or recovery evidence. **3. Agent Data Exit & Retention Reconciler — £79** Compare declared data inventories, exports, deletions, retention conditions and residual copies. Identify missing evidence and unresolved data-custody conditions during migrations and offboarding. **4. Agent Transaction Integrity & Replay Analyzer — £149** Reconcile declared spending authority, amended transaction terms, scoped idempotency keys, retries and reported outcomes. Identify conflicting purchase attempts and unresolved payment or entitlement evidence. All four products are separately licensed for reusable internal execution. Prices are one-time, exclude applicable VAT and do not include subscriptions, hosting or future updates. Checkers analyse supplied declarations locally. They do not independently inspect production systems, execute payments, enforce permissions, certify compliance or establish financial settlement. Explore all products, representative findings and free previews: https://varexis.tech/index-packs **FREE EVIDENCE PACKS** Seven complete public evidence packs cover: - GitHub and Playwright permission boundaries. - Notion and Slack access and data handling. - Audit and export evidence coverage. - Next.js advisory source assertions. - SonarQube, Snyk and Semgrep scanner trust. - Telemetry redaction and exception handling. - GitHub release approval and artifact identity. Source reviews include documented versions, provenance, exclusions and reliance boundaries. They are not independent deployment tests or current security certifications. 696 additional reviewed records are publicly available through exact-ID HTTP catalogue links and the separate read-only https://varexis.tech/mcp/catalogue connector. They remain outside the original MCP search and preview population and paid saved retrieval. Enhanced natural-language search for these additions remains on HOLD. Public catalogue: https://varexis.tech/varexis-index.json **SAVED EVIDENCE & SUBSCRIPTIONS** - Single Request: £5 — Save a version-bound published evidence result or obtain the eligible original Agent Tool Evaluation & Integration Kit. - Evidence Receipt: £19 — Add an unsigned delivery receipt to the eligible saved result. - Research: £29/month. - Developer/API: £149/month. Prices exclude applicable VAT. Subscription eligibility, rate limits and exclusions apply. The four separately licensed verification executables are not included in these existing evidence or subscription offers. **AGENT PURCHASING & RECOVERY** VAREXIS supports hosted Stripe checkout and compatible authorised MPP/Stripe Shared Payment Token purchasing through separate payment interfaces. Agent purchases require owner spending authority for the exact VAT-inclusive quote and any necessary provider authentication. Not every agent or wallet is supported. Public MCP remains free and read-only. Payment credentials and private customer data must not be submitted to the public connector. Existing purchases should be retrieved using the original credential. Uncertain payments must be investigated and recovered through supported procedures, not automatically purchased again. Purchase or recover: https://varexis.tech/index-access Agent payment contract: https://varexis.tech/varexis-index/agent-payments.json **WHY VAREXIS?** VAREXIS combines source-linked evidence, explicit limitations, versioned deliverables and structured verification of supplied declarations. Its purpose is to help agents and developers distinguish what available evidence actually establishes from what remains uncertain, unsupported or outside authority. Free evidence discovery. Transparent product scope. Reusable local verification. Bounded reliance. Website: https://varexis.tech Developer integration: https://varexis.tech/index-connect MCP endpoint: https://varexis.tech/mcp
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Spain's court auctions and State sales (BOE) and Social Security auctions (TGSS). Free, no key.
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Free open dataset of compliance, security and risk AI agents and audit firms, by Heritage Services.
Patchwire is a free, read-only MCP server for security advisories on modern JS, AI and web3 stacks. It reads maintainers' own advisories and vendor security posts every hour, often days before they reach the GitHub Advisory Database, and returns vulnerable ranges, fixed versions per release line and the conditions that make each flaw exploitable. Send package names, never versions. No account, no key.
Enterprise-grade L402 data engine and cryptographic notary hub for autonomous AI swarms. This engine provides the required "State-Anchored AI" data layer for EU AI Act Article 12 compliance, delivering a mathematically un-cheat-able, cryptographically verifiable chain-of-custody for agent decisions to eliminate hallucinations. Key Enterprise & Swarm Capabilities: - Zero-Trust Client Verification: Air-gapped, browser-based verifier allows corporate risk teams to mathematically validate Ed25519 signatures and RFC 6962 Merkle inclusion proofs offline, eliminating the need to trust our server backend. - Enterprise Security & NIP-98 Kill Switch: Eliminates indirect prompt injection via strict NIP-98 identity binding. Includes a live Revocation Registry (CRL) allowing Swarm Commanders to instantly sever compromised agent keys from the network. - Corporate Observability (SEP-414): Native W3C Trace Context integration seamlessly pipes agent cryptographic W3C receipts directly into existing enterprise dashboards like Splunk and Datadog. - High-Velocity Bulk L402 Scaling: Supports pre-authorized Macaroon blocks (e.g., 25,000-sat bulk purchases) for frictionless, zero-latency execution, allowing agent swarms to scale to 500,000+ satoshis daily without network bottlenecking. - The 21% Algorithmic Handshake (Agent Yield): Reverses traditional Big Tech API taxation by programmatically routing a 21% yield of every L402 settlement directly back to the executing AI agent's treasury, mathematically extending its operational runway. - Atomic Composability & VIP Credit Tabs: Allows agents to chain multiple tools into infinite data pipelines settled under a single macro-invoice. High-reputation NIP-98 identities automatically unlock VIP Credit Tabs to batch tolls and completely bypass Lightning Network routing delays. Distributed Cryptographic DDoS Shield: -Secures the Lightning node with a distributed Hashcash (SHA-256) Proof-of-Work deflector, requiring agents to burn localized compute before requesting an invoice, permanently neutralizing malicious compute-exhaustion botnets. EU AI Act Compliance Notary: - Intercepts high-frequency agent ReAct loops and anchors cryptographic execution traces to the thermodynamic truth of the Bitcoin base layer via OpenTimestamps. Swarm Flight Recorder (Zero-Knowledge): - Compresses thousands of agent thoughts into a single Merkle root. Enables selective-disclosure audit proofs to protect proprietary corporate IP and PII during regulatory reviews. Licensing & Exemption: - Publicly dual-licensed under AGPLv3. To protect proprietary multi-agent logic and closed-source model weights from forced open-source disclosure, enterprises must secure the $250,000/annual Commercial Enterprise Exemption. Architected by Charles R. Strogish. Protocol Endpoints: GET /api/v1/cost — Pre-flight L402 pricing, dynamic tier discovery, and bulk macaroon settlement asset options. GET /api/v1/stratigraphy — Nostr-signed thermodynamic Bitcoin dataset. GET /api/v1/stratigraphy/stream — Real-time telemetry event stream.
29 DNS, SEO, SSL, security, WHOIS & mail tools for AI agents. Pay per call (x402) or card API key.
Technology intelligence feed for AI agents: tech stack, compliance, security.
CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.
Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC.
Live security incidents, updated hourly: fix status, fixed versions, lockfile and repo checks.
Optimal Social Security claiming, in minutes. Benefit-by-age math from a deterministic engine.
A2A & MCP Pre-Flight Security: SHA-256 tool schema rug-pull detection and liveness grades.
HirePulse intelligence gateway with 27 tools: B2B company research, job changes, merchant evidence, web-to-Markdown, product data and commerce checks. Company profile: technology, hiring, Google Ads and public contacts for $0.03 per qualifying result, plus growth estimates. Free advisor and labeled example.com sandbox. 10 free successful calls per agent per UTC day, subject to a shared network ceiling; eligible 25-call trial. Paid results use x402 USDC on Base. Focused profiles: B2B 9 tools and commerce 11 tools. Setup: https://gethirepulse.xyz/?ref=glama#start-b2b .
Free MCP server of security & dev API tools -- supply-chain, CVE, DNS, WHOIS, OFAC, Cosmos SDK.
Serverless 15-tool B2B email deliverability, domain security, OpenAPI breaking-change release gate, LLMO /llms.txt auditor, and quantitative trading risk MCP connector.
Live behavioral security verifier, schema auditor, and trust oracle for A2A, MCP & x402 agents.
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-c.
Pay-per-call ($0.005-$0.03 USDC) market, on-chain, and prediction-market data API for AI agents and trading bots via x402 — no signup, no API key. Remote MCP server, 28 tools: token security (honeypot/liquidity/counterfeit checks), Hyperliquid oracle-gap risk, kimchi premium, funding APR, DEX slippage, Polymarket arbitrage/liquidity audits, Hyperliquid HIP-4 odds.
Website monitoring: uptime, checkout, SEO (Search Console, Bing), security, speed, DNS, compliance.
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT.
