"Security" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Prompt-injection shield for agents: read pages, scan content, audit MCP servers and skills. x402.
AI-native observability and security for engineering teams and coding agents. Search production logs in plain language, investigate issues and root causes, and create or edit live dashboards in your Sazabi workspace. Requires a Sazabi account (OAuth, or a secret key via the X-Sazabi-Secret-Key header).
VAREXIS-INDEX — Source-Linked Evidence & Verification Tools for AI Agents VAREXIS-INDEX provides free, source-linked evidence for agent decisions through twelve focused guides and two distinct read-only MCP connectors. The original `/mcp` connector covers the approved search and preview population. The companion `/mcp/catalogue` provides deterministic access to 696 additional records by category and exact identifier. Configure both through the existing quickstart: https://varexis.tech/index-connect#quickstart Four optional one-time local checkers analyse supported customer-supplied declarations: Tool Admission £49, Audit Coverage £79, Data Exit £79 and Transaction Integrity £149, excluding VAT. These products do not independently inspect live systems, enforce permissions, establish payment settlement, verify deletion or certify compliance. Twelve free decision guides: https://varexis.tech/index-packs#free-decision-guides Read-only agent enquiry navigation (12 guides, 99 referenced records): https://varexis.tech/varexis-index/agent-entry.json Select a candidate guide, then follow the exact connector tool and identifier in the canonical manifest. Navigation does not establish applicability, a customer outcome or authority to act. Evaluate agent permissions, delegated authority, audit provenance, payment integrity, data retention and software supply-chain evidence before relying on documented claims. **FREE MCP CONNECTOR** Endpoint: https://varexis.tech/mcp Connect using Streamable HTTP. No authentication is required for public evidence discovery. Four free, read-only tools: - find_evidence_questions — Find existing reviewed evidence questions and matching routes. - preview_evidence_answer — Retrieve complete supported public answers, sources, limitations and snapshot hashes. - find_package_advisories — Find source-bound software advisory records. - get_index_access_options — Discover available services, pricing, licensing and purchasing requirements. Public MCP cannot execute actions, inspect private systems or authorise deployment. Developer quickstart: https://varexis.tech/index-connect **LICENSED VERIFICATION TOOLS** Four separately licensed, reusable local executables: **1. Agent Tool Admission & Permission Control — £49** Compare declared tool actions, resources, recipients and permissions across supported GitHub, Playwright, Notion and Slack integrations. Identify authority conflicts, missing verification and permission changes before human review. **2. Agent Audit & Evidence Coverage — £79** Reconcile declared identities, authorisations, actions and outcomes. Identify missing audit events, inconsistent references and unresolved export, retention or recovery evidence. **3. Agent Data Exit & Retention Reconciler — £79** Compare declared data inventories, exports, deletions, retention conditions and residual copies. Identify missing evidence and unresolved data-custody conditions during migrations and offboarding. **4. Agent Transaction Integrity & Replay Analyzer — £149** Reconcile declared spending authority, amended transaction terms, scoped idempotency keys, retries and reported outcomes. Identify conflicting purchase attempts and unresolved payment or entitlement evidence. All four products are separately licensed for reusable internal execution. Prices are one-time, exclude applicable VAT and do not include subscriptions, hosting or future updates. Checkers analyse supplied declarations locally. They do not independently inspect production systems, execute payments, enforce permissions, certify compliance or establish financial settlement. Explore all products, representative findings and free previews: https://varexis.tech/index-packs **FREE EVIDENCE PACKS** Seven complete public evidence packs cover: - GitHub and Playwright permission boundaries. - Notion and Slack access and data handling. - Audit and export evidence coverage. - Next.js advisory source assertions. - SonarQube, Snyk and Semgrep scanner trust. - Telemetry redaction and exception handling. - GitHub release approval and artifact identity. Source reviews include documented versions, provenance, exclusions and reliance boundaries. They are not independent deployment tests or current security certifications. 696 additional reviewed records are publicly available through exact-ID HTTP catalogue links and the separate read-only https://varexis.tech/mcp/catalogue connector. They remain outside the original MCP search and preview population and paid saved retrieval. Enhanced natural-language search for these additions remains on HOLD. Public catalogue: https://varexis.tech/varexis-index.json **SAVED EVIDENCE & SUBSCRIPTIONS** - Single Request: £5 — Save a version-bound published evidence result or obtain the eligible original Agent Tool Evaluation & Integration Kit. - Evidence Receipt: £19 — Add an unsigned delivery receipt to the eligible saved result. - Research: £29/month. - Developer/API: £149/month. Prices exclude applicable VAT. Subscription eligibility, rate limits and exclusions apply. The four separately licensed verification executables are not included in these existing evidence or subscription offers. **AGENT PURCHASING & RECOVERY** VAREXIS supports hosted Stripe checkout and compatible authorised MPP/Stripe Shared Payment Token purchasing through separate payment interfaces. Agent purchases require owner spending authority for the exact VAT-inclusive quote and any necessary provider authentication. Not every agent or wallet is supported. Public MCP remains free and read-only. Payment credentials and private customer data must not be submitted to the public connector. Existing purchases should be retrieved using the original credential. Uncertain payments must be investigated and recovered through supported procedures, not automatically purchased again. Purchase or recover: https://varexis.tech/index-access Agent payment contract: https://varexis.tech/varexis-index/agent-payments.json **WHY VAREXIS?** VAREXIS combines source-linked evidence, explicit limitations, versioned deliverables and structured verification of supplied declarations. Its purpose is to help agents and developers distinguish what available evidence actually establishes from what remains uncertain, unsupported or outside authority. Free evidence discovery. Transparent product scope. Reusable local verification. Bounded reliance. Website: https://varexis.tech Developer integration: https://varexis.tech/index-connect MCP endpoint: https://varexis.tech/mcp
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Patchwire is a free, read-only MCP server for security advisories on modern JS, AI and web3 stacks. It reads maintainers' own advisories and vendor security posts every hour, often days before they reach the GitHub Advisory Database, and returns vulnerable ranges, fixed versions per release line and the conditions that make each flaw exploitable. Send package names, never versions. No account, no key.
Live security incidents, updated hourly: fix status, fixed versions, lockfile and repo checks.
Kaiva Bridge turns your API, database or documents into a managed MCP server for Claude, ChatGPT, Cursor and VS Code. Point it at an OpenAPI or Swagger spec, an API docs link, a cURL command, a Postman collection, a GraphQL endpoint, Postgres, MySQL, MariaDB or SQL Server, spreadsheets, PDFs and other documents, or an MCP server you already run. Bridge reads the source and proposes tools, and you choose which ones your AI client sees. No code to write and nothing to run. Connect this server and your agent does the setup for you: it lists your servers, shows one, drafts a new server from an OpenAPI spec, and refreshes a server's tools when its API changes. Free plan: 10 servers and 200,000 tool calls a month, no credit card. Pricing: https://kaiv.ai/bridge/pricing Security: https://kaiv.ai/bridge/security Docs: https://kaiv.ai/bridge/docs
Free MCP server of security & dev API tools -- supply-chain, CVE, DNS, WHOIS, OFAC, Cosmos SDK.
Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and security.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Dutch gross-to-net salary and social security (WW, WIA, IVA) calculation engine for 2026.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
CapaLens is a read-only software directory for people and AI assistants. Explore 234 software products and 347 MCP, API and CLI interface listings using seven discovery tools. Documentation review does not mean live vendor testing or security testing; no vendor integrations have been tested. CapaLens does not execute vendor actions or collect vendor credentials.
Magery Forge is a security-audit engine for people who ship code fast and don't have a security team. Use cases: • Pre-release security check • Weekly automated security monitoring • Agent-driven security scanning (MCP) • Clearing a shipped product of common vulnerabilities before users hit them
Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.
Domain security reconnaissance tools for AI agents via Model Context Protocol. 13 security tools — DNS, SSL, HTTP headers, email auth, port scan, propagation, reverse DNS, ASN/BGP, RDAP/WHOIS, subnet calc, and comprehensive security scan — callable from Claude Desktop and any MCP-compatible AI agent. Part of DechoNet. Every tool here is also a free web tool at dechonet.com — no sign-up, no API key — backed by error-fix guides. This package brings the same checks to AI agents.
Read-only MCP server that answers questions about turva.dev from its published data. Five tools return JSON: the service catalog with prices, contact and operator details, engagement principles and dated agent-readiness and security evidence with verification links. Connect over Streamable HTTP. You need no API key. The server does not scan other websites or run audits.
WebsitePublisher.ai turns your AI into your app developer. ChatGPT, Claude, Gemini, Cursor, Windsurf, Copilot, Mistral or Grok understand what you want — WebsitePublisher gives them the power to actually build, publish and host it. It's the AI website maker and website builder that delivers the whole app, not just a static site: pages, forms, payments, an installable PWA that works offline and syncs — all in one product, no code, no WordPress, no hosting setup, right from your phone. Every app is unique because it comes from your conversation, not a template. Includes a visual editor for hands-on changes, 114 plug-and-play integrations, dynamic data models, and enterprise-grade security with AES-256-GCM encrypted credentials.
Security tools for coding agents: dependency advisory audits and evidence for remediation.
SQL validation, formatting, parsing, metadata extraction, linting, and security analysis.
Human-reviewed audit of a public website: bugs, passive security checks, UX. Order link for owners.
Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens. Free.
Breaking changes, deprecations and security fixes for 38 popular APIs/SDKs. Paid per call via x402.
Static MCP, source-code and injection-indicator checks with redacted signed receipts.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
Real-time FIRST.org EPSS 30-day CVE exploit probability scoring and OSV package security audit.
Google Open Source Insights (deps.dev) OpenSSF Security Scorecard & dependency tree audit.
500+ free tools over MCP: dev, text and security utilities, 230+ calculators. No sign-up.
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
