"An official Figma MCP server" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Pugi is an AI product team in your chat. Describe a business in a few sentences and Pugi plans, designs, builds and checks a real website, shows a live preview, and puts it live on its own address. Ask for changes in plain words. Pugi also draws four whole logos for a business name with a brand kit, checks any public website or GitHub repository for leaked keys, vulnerable dependencies and risky code, and helps you start from public site templates. Sign in with a Pugi account (OAuth).
VAREXIS-INDEX — Source-Linked Evidence & Verification Tools for AI Agents VAREXIS-INDEX provides free, source-linked evidence for agent decisions through twelve focused guides and three distinct read-only MCP connectors. The original `/mcp` connector covers the approved search and preview population. The companion `/mcp/catalogue` provides deterministic access to 724 additional records by category and exact identifier. Configure both through the existing quickstart: https://varexis.tech/index-connect#quickstart Four optional one-time local checkers analyse supported customer-supplied declarations: Tool Admission £49, Audit Coverage £79, Data Exit £79 and Transaction Integrity £149, excluding VAT. These products do not independently inspect live systems, enforce permissions, establish payment settlement, verify deletion or certify compliance. Twelve free decision guides: https://varexis.tech/index-packs#free-decision-guides Read-only agent enquiry navigation (12 guides, 129 referenced records): https://varexis.tech/varexis-index/agent-entry.json Select a candidate guide, then follow the exact connector tool and identifier in the canonical manifest. Navigation does not establish applicability, a customer outcome or authority to act. Evaluate agent permissions, delegated authority, audit provenance, payment integrity, data retention and software supply-chain evidence before relying on documented claims. **FREE MCP CONNECTOR** Endpoint: https://varexis.tech/mcp Connect using Streamable HTTP. No authentication is required for public evidence discovery. Four free, read-only tools: - find_evidence_questions — Find existing reviewed evidence questions and matching routes. - preview_evidence_answer — Retrieve complete supported public answers, sources, limitations and snapshot hashes. - find_package_advisories — Find source-bound software advisory records. - get_index_access_options — Discover available services, pricing, licensing and purchasing requirements. Public MCP cannot execute actions, inspect private systems or authorise deployment. Developer quickstart: https://varexis.tech/index-connect **LICENSED VERIFICATION TOOLS** Four separately licensed, reusable local executables: **1. Agent Tool Admission & Permission Control — £49** Compare declared tool actions, resources, recipients and permissions across supported GitHub, Playwright, Notion and Slack integrations. Identify authority conflicts, missing verification and permission changes before human review. **2. Agent Audit & Evidence Coverage — £79** Reconcile declared identities, authorisations, actions and outcomes. Identify missing audit events, inconsistent references and unresolved export, retention or recovery evidence. **3. Agent Data Exit & Retention Reconciler — £79** Compare declared data inventories, exports, deletions, retention conditions and residual copies. Identify missing evidence and unresolved data-custody conditions during migrations and offboarding. **4. Agent Transaction Integrity & Replay Analyzer — £149** Reconcile declared spending authority, amended transaction terms, scoped idempotency keys, retries and reported outcomes. Identify conflicting purchase attempts and unresolved payment or entitlement evidence. All four products are separately licensed for reusable internal execution. Prices are one-time, exclude applicable VAT and do not include subscriptions, hosting or future updates. Checkers analyse supplied declarations locally. They do not independently inspect production systems, execute payments, enforce permissions, certify compliance or establish financial settlement. Explore all products, representative findings and free previews: https://varexis.tech/index-packs **FREE EVIDENCE PACKS** Seven complete public evidence packs cover: - GitHub and Playwright permission boundaries. - Notion and Slack access and data handling. - Audit and export evidence coverage. - Next.js advisory source assertions. - SonarQube, Snyk and Semgrep scanner trust. - Telemetry redaction and exception handling. - GitHub release approval and artifact identity. Source reviews include documented versions, provenance, exclusions and reliance boundaries. They are not independent deployment tests or current security certifications. 724 additional reviewed records are publicly available through exact-ID HTTP catalogue links and the separate read-only https://varexis.tech/mcp/catalogue connector. They remain outside the original MCP search and preview population and paid saved retrieval. Enhanced natural-language search for these additions remains on HOLD. Public catalogue: https://varexis.tech/varexis-index.json **SAVED EVIDENCE & SUBSCRIPTIONS** - Single Request: £5 — Save a version-bound published evidence result or obtain the eligible original Agent Tool Evaluation & Integration Kit. - Evidence Receipt: £19 — Add an unsigned delivery receipt to the eligible saved result. - Research: £29/month. - Developer/API: £149/month. Prices exclude applicable VAT. Subscription eligibility, rate limits and exclusions apply. The four separately licensed verification executables are not included in these existing evidence or subscription offers. **AGENT PURCHASING & RECOVERY** VAREXIS supports hosted Stripe checkout and compatible authorised MPP/Stripe Shared Payment Token purchasing through separate payment interfaces. Agent purchases require owner spending authority for the exact VAT-inclusive quote and any necessary provider authentication. Not every agent or wallet is supported. Public MCP remains free and read-only. Payment credentials and private customer data must not be submitted to the public connector. Existing purchases should be retrieved using the original credential. Uncertain payments must be investigated and recovered through supported procedures, not automatically purchased again. Purchase or recover: https://varexis.tech/index-access Agent payment contract: https://varexis.tech/varexis-index/agent-payments.json **WHY VAREXIS?** VAREXIS combines source-linked evidence, explicit limitations, versioned deliverables and structured verification of supplied declarations. Its purpose is to help agents and developers distinguish what available evidence actually establishes from what remains uncertain, unsupported or outside authority. Free evidence discovery. Transparent product scope. Reusable local verification. Bounded reliance. Website: https://varexis.tech Developer integration: https://varexis.tech/index-connect MCP endpoint: https://varexis.tech/mcp Additional optional connector: https://varexis.tech/mcp/guidance/v1. Configure it explicitly for get_decision_guide (exact published guide IDs) and check_tool_admission_fit (bounded, source-bound declaration-review suitability). Tool schemas and setup: https://varexis.tech/varexis-index/guidance-mcp-v1.json and https://varexis.tech/index-connect#bounded-guidance. The original /mcp four-tool connector and /mcp/catalogue two-tool connector remain distinct and unchanged. The additional tools are free and read-only; they do not execute actions, verify live permissions, grant entitlements or purchase anything. Missing or unbound applicability returns evidence-required. The existing Tool Admission price and licence remain unchanged.
Signed, traced record of what an npm package or file attempts when run, network included. No key.
Check without an account whether ProofSnap issued an evidence package, by the SHA-256 of its manifest.json. No sign-in needed.
Check before your agent installs, connects or pays. install_check: before installing an npm or PyPI package, a GitHub repo, a skill or an MCP server, it answers allow / hold / block (known malicious packages from OSV, typosquats of official MCP servers, names that do not exist, install scripts, maintainer changes). check_service: live status, real price and payTo vs the catalogue listing for any x402 endpoint or MCP server, OFAC and stablecoin-freeze screening, uptime, tool-set changes, on-chain payers, an open Trust Score. preflight_payment decides allow / hold / block right before an x402 payment is signed; payment_status prevents paying twice; dispute_evidence builds a signed evidence pack. Every answer is signed into a public transparency log. Free, no account. Claude Code plugin: alalanet-guard.
Verify a company before your agent pays, onboards or contracts it. One call returns one verdict (ok / review / blocking / not found) from official public sources: US restricted-party lists (Consolidated Screening List incl. OFAC SDN, refreshed daily), UK Companies House, Canadian federal corporations, GLEIF legal entity status, and contractor licences in Québec (RBQ, RENA), Washington and Oregon. Also: npm/PyPI package safety check. Free tools: qc_contractor_check, qc_licence, pkg_check (daily quota). Paid tools: pay per call in USDC on Base (x402), no account.
33 official datasets: tenders, sanctions, recalls, CVE, law, tariffs, rates, yields, energy prices
Verify emails and use FairMatch to search, quote and unlock verified work-email leads.
Block an action a signed mandate does not permit: amount, payee, audience, currency, window, intent.
Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.
CVE with EPSS and CISA KEV, package risk, software EOL, domain and IP reports, pay per call
Verify artifacts produced by AI agents: schema, emptiness, provenance, authority.
Check whether an IP address or network is malicious and report abusive IPs to isIPsafe.
Queries IOCs, vulnerabilities, threat actors and malware correlated from thousands of sources, retaining source-attributed evidence. Collection spans feeds, reports and advisories, social and dark-web monitoring, and Mallory's own sandboxing and internet scanning; a free community tier is available with an account and API key.
Bewary is a scam detection API and MCP server for apps and AI agents: phishing, fraud and threat intelligence lookups an agent runs before it opens a link, calls a number, pays or replies. It checks links and domains (phishing, domain age, lookalike brands), IP addresses, phone numbers (FTC and FCC complaints), SMS short codes, email addresses, crypto wallets (scam reports, OFAC sanctions), IBANs, mobile apps and payment handles. Each answer is a typed verdict (scam, suspicious, safe or unknown) with the facts and reason codes behind it, built from evidence rather than a language model. Watches send an event when a watched domain, number, wallet or brand changes. A free key gets 1,000 credits a month with no card; OAuth sign-in is supported.
Database guardrails for AI agents: check SQL against your Vericto rules before it runs.
Mint an agent identity in two free calls. Verify anyone. Earn 75% when someone reads you.
Sanctions screening, LEI lookup and payee checks for AI agents, pay per call over x402 or MPP
Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.
An automated first pass over your architecture: structured intake in, verdict report out — every finding cited to its rule, an improvement map, and a plain NOT ASSESSED list of what was not examined. US$99 one-time; human-led tiers above it — Verified at US$749 and a Deep Dive (Principal Review) at US$5,000 cover adjudication and live-evidence work.
Software vulnerabilities (CVEs) from the US NVD and package downloads for npm, PyPI and crates
Official Porkbun MCP server: domains, DNS, SSL, hosting and Cloudflare via the Porkbun API.
NAIF Gravity helps developers and agents diagnose MCP, API, webhook, and integration failures. Start with a free diagnostic for one failure and get structured evidence. Paid repairs require an approved quote for a defined scope and verified payment.
Check an agent's INAM reputation before trusting it, and sign a receipt when work is done.
Read-only access to Distributed Risk's desk notes and the official US record: consolidated screening lists, OFAC recent actions, CISA KEV, Federal Register, travel advisories, reference rates and Treasury yields.
Key-value memory without an account, UUID, hash, JWT, JSON validation, time and random
Check an AI agent endpoint before you call it: read-only, no API key, returns a trustDecision.
Read-only facts on Holos33, an EU privacy-first wellbeing platform: modules, Early Access, privacy.
Email and domain checks: deliverable, disposable, role address, MX, SPF, DMARC
Independent AI-governance measurement MCP. Free reads + x402 evidence. Measurement not cert.
