"An overview of penetration testing (pentest)" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Check an A2A agent before you delegate, or an MCP server's measured conduct. Free, no key.
Contract-change authorization for AI agents: preflight a change to an API or MCP contract, get a signed decision, and verify the receipt offline. Only a granted change can proceed.
Simceptor is an AI-native Mock API simulation platform with a built-in MCP server. It enables AI agents to create, inspect, update, and test dynamic mock APIs, conditional response rules, stateful session simulations, and network latency directly from context.
Find and live-check the paid x402 API for an agent task, ranked by real 30-day payers and price.
Parallel-burst abuse testing for agent APIs with replayable evidence packs.
Signed declarations of HTTP API exchanges for agent handoffs. Free preparation and verification; receipt issuance costs 0.002 USDC via x402 on Base. Start and connect: https://datoka.dev/api. Signatures attest declared data, not independent truth.
Webhook, email, WebSocket and tunnel testing for AI agents: capture, wait, verify, replay.
API documentation drifts away from the running service, so consumers integrate against a contract nobody keeps. Routebase keeps API design, testing, mocking and documentation on one living source of truth, and this MCP server exposes that workspace to AI agents. Agents can design endpoints, write and run test suites, manage mock servers and publish documentation, always under the permissions of the connected Routebase account.
AI-callable tools for API mocking, testing, monitoring, security, and automation.
Point Gecko at an OpenAPI spec; get first-call-correct, auth-hidden agent tools.
Verified, reproduced behavior of public HTTP APIs: spec gaps, errors, pagination, auth.
What is known to be broken in an MCP server or API operation, with the check that found it.
Sanctions API docs and request validation, with account-linked synthetic sandbox testing.
Audits a sample of HTTP request URLs against explicit, documented cache-key standardization rules...
Independent checks of paid x402 data sellers and of AI-agent access to shopping and travel sites
Diagnoses whether an MCP server is reachable, by live HTTP probe.
Check whether an MCP server answers, what its tools claim, and whether that claim has changed.
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Ephemeral mailboxes and a mock OAuth IdP for testing email and auth flows — 39 API-driven tools covering mailboxes, mails, attachments, domains, teams, and mock identities.
Verify an agent's advertised route, price, payment details, and schemas against its live endpoint.
