"AWS instance metadata service endpoint URL" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Source-linked evidence and reusable local checks for agent integration and review. Explore seven free evidence packs and three executable products, with questions, demonstrations and direct preview/purchase links: https://varexis.tech/index-packs Agent Tool Admission & Permission Control — GBP 49 + applicable VAT, one time. Supply local JSON declarations for GitHub, Playwright, Notion or Slack. The Node.js24 executable compares actions, resources, recipients, authority and inventory changes, returning a structured gap report. Free demonstration: https://varexis.tech/varexis-index/examples/agent-tool-admission/DEMONSTRATION.txt Agent Audit & Evidence Coverage — GBP 79 + applicable VAT, one time. Supply a declared event/evidence inventory. The local executable checks identity/authorization/action/outcome references and missing capture, export, retention or recovery coverage. Free demonstration: https://varexis.tech/varexis-index/examples/agent-audit-coverage/DEMONSTRATION.txt Each standalone licence is for one buyer or legal entity's internal staff, agents and CI use. No customer declarations are uploaded. No redistribution, external API resale, updates, monitoring or support SLA. Existing snapshot offers and subscriptions do not include these two licences. Checks concern supplied declarations; no live-permission inspection, enforcement, proof that records exist or certification. Seven complete evidence packs stay free: GitHub + Playwright permission boundaries; Notion + Slack access/data handling; GitHub/Slack/Cloudflare audit/export coverage; three dated Next.js advisory assertions; SonarQube/Snyk/Semgrep scanner trust; telemetry redaction gaps; GitHub release acceptance. These are dated documentation reviews or frozen source assertions, not independent tool tests or current safety assessments. Existing GBP 5 Single Request saves a version-bound public pack, or delivers the original Agent Tool Evaluation & Integration executable kit. GBP 19 Evidence Receipt also adds an unsigned delivery record. Plus applicable VAT. Eligible Research (GBP 29/month + VAT) and Developer/API (GBP 149/month + VAT) subscriptions retain their existing limits; an eligible pack or original kit uses one query. No continual refresh or permanent-retention promise. Public MCP discovery is free, unauthenticated and read-only: https://varexis.tech/mcp Connect: https://varexis.tech/index-connect Purchase or recover: https://varexis.tech/index-access Agent contract: https://varexis.tech/varexis-index/agent-payments.json Hosted Stripe and compatible authorised MPP/Stripe SPT purchasing use separate authenticated paths. Agents require owner spending authority for the exact tax-inclusive quote and required provider authentication; not every agent or wallet is compatible. Retrieve saved purchases or use eligible entitlements before buying. Recover uncertain payment with the original key and matching result endpoint; retain the original payment credential for supported retries. Never buy again to repair uncertain delivery. Payment adds no fresh investigation, independent assurance or deployment approval.
Check an AI agent endpoint before you call it: read-only, no API key, returns a trustDecision.
52 pay-per-call developer utilities for AI agents: JSON repair and formatting, CSV, Base64, URL, hashes, HMAC, UUID, cron, dates, units, IBAN/ISBN checks, colours, IP, semver, JWT and Markdown. USDC via x402.
Verify an artifact an AI agent produced — schema, emptiness, provenance and mandate authority — before you accept the work or pay for it. Ed25519-signed and verifiable without this service; 20 checks a day free, then 0.005 USDC per call over x402.
Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.
Find the best eligible service for an agent task through one task-first MCP tool.
Verify anything: email, phone, domain, URL and IBAN validation, phishing/malware URL screening, and OFAC sanctions checks. Pay-per-check in USDC on Base via x402 — no signup, no API keys.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
AI URL safety validator: SAFE/SUSPICIOUS/DANGEROUS verdict, trust score, threat intel.
security tools for AI agents: URL safety scanning, prompt injection detection (200+ patterns), email/password breach checks via HIBP, domain & IP reputation analysis, and AI skill supply chain scanning. Free tier (3 calls/day) or pay-per-request with USDC micropayments via x402.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Trust scoring for x402 endpoints — "should my agent pay this?" check_endpoint runs live diligence: x402 spec-compliance probe, price sanity vs market percentiles, payTo wallet on-chain activity (Base), directory presence, infra hygiene. Returns 0-100 score with per-check evidence. compare_price positions any price vs category market data. Pay-per-call via x402: $0.02/call USDC on Base, no account or API key. tools/list free.
Read-only MCP server that answers questions about turva.dev from its published data. Five tools return JSON: the service catalog with prices, contact and operator details, engagement principles and dated agent-readiness and security evidence with verification links. Connect over Streamable HTTP. You need no API key. The server does not scan other websites or run audits.
Pay-per-call safety checks for AI agents: screen a crypto address or URL before you transact.
Build, deploy, and run apps on AWS, GCP, Azure, Oracle Cloud, and your own hardware from chat.
Live x402 endpoint trust/diligence check before you pay it. $0.02/call via x402.
Score merchant domain, https URL, or 0x wallet trust before an agent pays. Does not send payments.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
Read token metadata, applications, audit logs, proxies and usage in the PCI vault.
Access control for text-to-SQL agents. Before the model sees the schema, schemagate keeps only the tables and columns the caller may read, picks the few a question needs, and refuses hidden ones at query time. This public endpoint serves a sample schema (no real data). Self-hosted it works with Postgres, Oracle, MySQL, SQL Server and SQLite.
