"Alibaba.com" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceSigned, traced record of what an npm package or file attempts when run, network included. No key.
Shared second brain for any AI with agent permissions
Brand protection: monitor domains, trademarks and app stores. Triage matches and track takedowns.
Technology intelligence feed for AI agents: tech stack, compliance, security.
Find lookalike domains of a brand's website and see which resolve and what they show.
Verify whether a phone number or email address is real and registered.
EU/UK tenders, EU law, funding, medicines, drug shortages, recalls, sanctions, CVE, CERT, holidays.
Sourced privacy answers: how private an app is, tool picks, app swaps, de-Googling, breaches.
Prove end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Find lookalike domains of a brand's website: typos, swapped letters, look-alike characters, added words and other TLDs. Shows which of them resolve in DNS and what their front page shows. One read-only tool, no sign-up. Registry name: com.openbait/lookalike-domains. Web version: https://openbait.com/tools/typosquat-check
Incident-reporting deadlines from the law: CRA, NIS2, DORA, GDPR, HIPAA, SEC 8-K. 6 of 9 tools free.
Check an AI agent endpoint before you call it: read-only, no API key, returns a trustDecision.
Streamable HTTP JSON-RPC 2.0 MCP Server exposing 9 deterministic B2B SaaS revenue leak detection, Visa CE 3.0 dispute evidence linting, and webhook security tools.
Check before money moves. Lorg Check tells an AI agent, or you, whether a token is a trap or an address is unsafe to pay, on Base and Ethereum. In live tests on new launches it blocked traps that GoPlus and Honeypot.is missed. Call check_token before buying or swapping into a token: it simulates a real buy and sell-back through the token’s own pool, reads what the creator can still do, who can pull the liquidity, and whether the creator was paid by a wallet behind earlier rugs. Call check_address before sending funds: sanctions, scam labels, EIP-7702 sweepers and address-poisoning look-alikes. Every answer is signed and says proceed, limit_exposure or do_not_proceed, with a one-line summary to show the user. Free key by GitHub sign-in, or connect with an API key.
Deploy apps from GitHub, read build/runtime logs, and manage your app's users from your AI agent.
Analyze DMARC reports and SPF/DKIM issues with Suped. - Review monitored domains and email authentication issues. - Download original DMARC report XML. - Add domains for monitoring. - Create client organizations as an MSP administrator. Your Suped permissions apply. Adding a domain does not change DNS; issues are read-only.
Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.
Timestamped proof that AI outputs and data existed, anchored on the Privi blockchain.
Who is calling? Spam reports, a verdict and the business behind NL, BE and LU phone numbers.
