"Converting User Requirements to Technical Specifications" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
ctlogs.dev searches the public Certificate Transparency logs, where every publicly trusted TLS certificate is recorded. Connected to it, an assistant can answer questions such as "which subdomains does example.com have", "who issued the certificates for this name" or "which domains does this company hold certificates for".
VAREXIS-INDEX — Source-Linked Evidence & Verification Tools for AI Agents VAREXIS-INDEX provides free, source-linked evidence for agent decisions through twelve focused guides and three distinct read-only MCP connectors. The original `/mcp` connector covers the approved search and preview population. The companion `/mcp/catalogue` provides deterministic access to 724 additional records by category and exact identifier. Configure both through the existing quickstart: https://varexis.tech/index-connect#quickstart Four optional one-time local checkers analyse supported customer-supplied declarations: Tool Admission £49, Audit Coverage £79, Data Exit £79 and Transaction Integrity £149, excluding VAT. These products do not independently inspect live systems, enforce permissions, establish payment settlement, verify deletion or certify compliance. Twelve free decision guides: https://varexis.tech/index-packs#free-decision-guides Read-only agent enquiry navigation (12 guides, 129 referenced records): https://varexis.tech/varexis-index/agent-entry.json Select a candidate guide, then follow the exact connector tool and identifier in the canonical manifest. Navigation does not establish applicability, a customer outcome or authority to act. Evaluate agent permissions, delegated authority, audit provenance, payment integrity, data retention and software supply-chain evidence before relying on documented claims. **FREE MCP CONNECTOR** Endpoint: https://varexis.tech/mcp Connect using Streamable HTTP. No authentication is required for public evidence discovery. Four free, read-only tools: - find_evidence_questions — Find existing reviewed evidence questions and matching routes. - preview_evidence_answer — Retrieve complete supported public answers, sources, limitations and snapshot hashes. - find_package_advisories — Find source-bound software advisory records. - get_index_access_options — Discover available services, pricing, licensing and purchasing requirements. Public MCP cannot execute actions, inspect private systems or authorise deployment. Developer quickstart: https://varexis.tech/index-connect **LICENSED VERIFICATION TOOLS** Four separately licensed, reusable local executables: **1. Agent Tool Admission & Permission Control — £49** Compare declared tool actions, resources, recipients and permissions across supported GitHub, Playwright, Notion and Slack integrations. Identify authority conflicts, missing verification and permission changes before human review. **2. Agent Audit & Evidence Coverage — £79** Reconcile declared identities, authorisations, actions and outcomes. Identify missing audit events, inconsistent references and unresolved export, retention or recovery evidence. **3. Agent Data Exit & Retention Reconciler — £79** Compare declared data inventories, exports, deletions, retention conditions and residual copies. Identify missing evidence and unresolved data-custody conditions during migrations and offboarding. **4. Agent Transaction Integrity & Replay Analyzer — £149** Reconcile declared spending authority, amended transaction terms, scoped idempotency keys, retries and reported outcomes. Identify conflicting purchase attempts and unresolved payment or entitlement evidence. All four products are separately licensed for reusable internal execution. Prices are one-time, exclude applicable VAT and do not include subscriptions, hosting or future updates. Checkers analyse supplied declarations locally. They do not independently inspect production systems, execute payments, enforce permissions, certify compliance or establish financial settlement. Explore all products, representative findings and free previews: https://varexis.tech/index-packs **FREE EVIDENCE PACKS** Seven complete public evidence packs cover: - GitHub and Playwright permission boundaries. - Notion and Slack access and data handling. - Audit and export evidence coverage. - Next.js advisory source assertions. - SonarQube, Snyk and Semgrep scanner trust. - Telemetry redaction and exception handling. - GitHub release approval and artifact identity. Source reviews include documented versions, provenance, exclusions and reliance boundaries. They are not independent deployment tests or current security certifications. 724 additional reviewed records are publicly available through exact-ID HTTP catalogue links and the separate read-only https://varexis.tech/mcp/catalogue connector. They remain outside the original MCP search and preview population and paid saved retrieval. Enhanced natural-language search for these additions remains on HOLD. Public catalogue: https://varexis.tech/varexis-index.json **SAVED EVIDENCE & SUBSCRIPTIONS** - Single Request: £5 — Save a version-bound published evidence result or obtain the eligible original Agent Tool Evaluation & Integration Kit. - Evidence Receipt: £19 — Add an unsigned delivery receipt to the eligible saved result. - Research: £29/month. - Developer/API: £149/month. Prices exclude applicable VAT. Subscription eligibility, rate limits and exclusions apply. The four separately licensed verification executables are not included in these existing evidence or subscription offers. **AGENT PURCHASING & RECOVERY** VAREXIS supports hosted Stripe checkout and compatible authorised MPP/Stripe Shared Payment Token purchasing through separate payment interfaces. Agent purchases require owner spending authority for the exact VAT-inclusive quote and any necessary provider authentication. Not every agent or wallet is supported. Public MCP remains free and read-only. Payment credentials and private customer data must not be submitted to the public connector. Existing purchases should be retrieved using the original credential. Uncertain payments must be investigated and recovered through supported procedures, not automatically purchased again. Purchase or recover: https://varexis.tech/index-access Agent payment contract: https://varexis.tech/varexis-index/agent-payments.json **WHY VAREXIS?** VAREXIS combines source-linked evidence, explicit limitations, versioned deliverables and structured verification of supplied declarations. Its purpose is to help agents and developers distinguish what available evidence actually establishes from what remains uncertain, unsupported or outside authority. Free evidence discovery. Transparent product scope. Reusable local verification. Bounded reliance. Website: https://varexis.tech Developer integration: https://varexis.tech/index-connect MCP endpoint: https://varexis.tech/mcp Additional optional connector: https://varexis.tech/mcp/guidance/v1. Configure it explicitly for get_decision_guide (exact published guide IDs) and check_tool_admission_fit (bounded, source-bound declaration-review suitability). Tool schemas and setup: https://varexis.tech/varexis-index/guidance-mcp-v1.json and https://varexis.tech/index-connect#bounded-guidance. The original /mcp four-tool connector and /mcp/catalogue two-tool connector remain distinct and unchanged. The additional tools are free and read-only; they do not execute actions, verify live permissions, grant entitlements or purchase anything. Missing or unbound applicability returns evidence-required. The existing Tool Admission price and licence remain unchanged.
Let your AI agent pay for APIs and data without handing it your money. In ChatGPT, Claude or Grok, the agent finds paid x402 APIs (with each seller's payout record from x402 Doctor) and asks to pay; you approve and sign each payment in your own wallet: MetaMask or Coinbase Wallet (USDC on Base), Phantom (USDC on Solana) or Xaman (RLUSD on the XRP Ledger). Fizzl checks every payment before you sign and every paid answer for hidden instructions. Fizzl never holds your keys. Free to start.
Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.
Per-user memory, connected accounts, permitted actions and the action record for your agents.
Safe to sign? EVM/Solana/XRPL/Algorand/Stellar txs, permits, tokens; OFAC screen: green/orange/red
Deltabridge brings an AI-native cyber threat intelligence platform into your AI agent. Search a knowledge graph of 200,000+ threat actors, malware families, vulnerabilities, indicators and campaigns, mapped to MITRE ATT&CK. Look up and enrich IOCs, trace links between entities and read living briefs built from 300+ open sources. Read-only, scoped to your organisation, with OAuth sign-in or an API key. Included on Researcher, Business and Enterprise plans.
Free CISM, CISSP, CISA, AAISM and AAIA practice questions, and read-only access to your study.
Governed organizational memory for AI, by EigenAtom. ChatGPT, Claude, Cursor and other agents save explicit memories to one shared store over MCP; AI only suggests labels, and the organization's deterministic policy decides who may read each memory, so recall returns only what the signed-in person may see. No admin bypass, audited changes, and memory content never reaches logs. Free 60-day trial, no credit card.
Causal check on AI agent claims, from ad-spend/ROAS lift to any decision: pass, caution or hold.
Verify emails and use FairMatch to search, quote and unlock verified work-email leads.
30 security tools + the Vigia agent to audit MCP servers before you connect.
SpotCheck scores any Spotify playlist 0 to 100 for bot-farm patterns from public data, and scans every playlist behind a distributor's artificial streaming warning. Free tier, no Spotify login. https://spotcheck.cc
Arsen is a human risk management platform that enables security teams to assess employee exposure through advanced phishing, voice phishing, and deepfake simulations, and strengthen their resilience with adaptive cybersecurity awareness training. Arsen MCP connects your Arsen platform to your preferred AI assistant, including Claude, ChatGPT, and any MCP-compatible assistant. With Arsen MCP, you can: 1. Build and launch campaigns. Let your AI assistant prepare phishing simulation campaigns and cybersecurity awareness programs, then launch them with your approval. 2. Get actionable insights from your data. Ask questions in plain language and get answers based on your organization's actual data, including campaign results, click, compromise and reporting rates, phishing score trends, coverage, and teams that need attention. 3. Manage multiple client organizations. Give MSSPs the ability to query and work across every client organization they manage, from a single AI assistant. Secure by design. Users authenticate with their Arsen account (SSO and MFA supported), and every request is governed by their existing Arsen permissions.
Prove end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP
Wire your admin panel to Hibira Live Chat single sign-on: setup, code for your stack, token checks.
Check whether an IP address or network is malicious and report abusive IPs to isIPsafe.
Live conflict reports traced to source: strikes, attacks and military activity, read-only.
30 security tools + the Vigía agent to audit MCP servers for prompt injection, SSRF, leaked secrets, auth bypass and more — scan before you connect.
Check untrusted text (user messages, retrieved pages, tool outputs) for prompt injection before it reaches the LLM. Returns safe or not, plus the threat type. Free tier of 10,000 checks a month.
An automated first pass over your architecture: structured intake in, verdict report out — every finding cited to its rule, an improvement map, and a plain NOT ASSESSED list of what was not examined. US$99 one-time; human-led tiers above it — Verified at US$749 and a Deep Dive (Principal Review) at US$5,000 cover adjudication and live-evidence work.
Parse a User-Agent: browser, OS, device, plus bot, search crawler, AI crawler and AI agent flags.
Disposable email for AI agents: instant inboxes, verification-code and structured-intent extraction (OTP, magic link, billing, security alerts), including codes hidden in .txt and PDF attachments. Task-scoped inboxes with long-poll wait, scoped sub-tokens bound to named agent identities, and one-call self-serve onboarding for new agents.
ViaSocket is integration and AI infrastructure for developers. Connect 2,300+ apps, build and manage automated workflows, embed AI agents with persistent memory, and add authentication, organisations, and embedded integration UIs to your product through a single MCP server.
Read-only access to Distributed Risk's desk notes and the official US record: consolidated screening lists, OFAC recent actions, CISA KEV, Federal Register, travel advisories, reference rates and Treasury yields.
Gives any public GitHub repo a safety grade (A to F) in plain English, with a clear next step: install, ask first, or don't install.
CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
Replay, verify and audit AI agent decisions with signed evidence. Public demo running on the fictional Acme Mutual insurance environment; a full integration is required to use Forge with real systems.
Human-reviewed digests on AI, regulation and cybersecurity, every fact linked to its source.
Safety grade (A to F) for any public GitHub repo, in plain English, before you install it.
Check before money moves. Lorg Check tells an AI agent, or you, whether a token is a trap or an address is unsafe to pay, on Base and Ethereum. In live tests on new launches it blocked traps that GoPlus and Honeypot.is missed. Call check_token before buying or swapping into a token: it simulates a real buy and sell-back through the token’s own pool, reads what the creator can still do, who can pull the liquidity, and whether the creator was paid by a wallet behind earlier rugs. Call check_address before sending funds: sanctions, scam labels, EIP-7702 sweepers and address-poisoning look-alikes. Every answer is signed and says proceed, limit_exposure or do_not_proceed, with a one-line summary to show the user. Free key by GitHub sign-in, or connect with an API key.
Encrypted memory, knowledge graph and provable history for AI agents. ENYAL is the trust infrastructure for autonomous AI: identity, encrypted memory, and BSV-anchored proofs. Archived records are Merkle-batched and anchored to a permanent cryptographic ledger, and any record's inclusion proof can be checked by anyone, with no account.
Verify providers before agents trust them. Settle-proven end-to-end 2026-11-02 (SELF-PROOF).
Deploy a repo to a live app from chat: servers, Postgres, domain, email, Stripe, security scan.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Let AI agents run your Moderation API account: triage review queues, investigate authors, tune policies and wordlists, respond to incidents and report on moderation.
Email security and AI discoverability scores for any domain, with the exact record or tag to fix.
Secure MCP Server for WordPress connects AI assistants and agents to WordPress with secure, controlled access. It lets AI interact with WordPress through MCP while helping organizations manage access, enforce policies, protect non-human identities (NHI), and require human approval for sensitive actions. Use it to securely connect tools such as ChatGPT, Claude, and Cursor with WordPress. Marketplace Link: https://wordpress.org/plugins/miniorange-secure-mcp-server/ Official website: https://plugins.miniorange.com/mcp-server-ai-policy-enforcement-wordpress ChatGpt Marketplace: https://chatgpt.com/plugins/plugin_asdk_app_6a312802286c8191bad0a7278a4e53ef Claude Marketplace: https://claude.ai/directory/miniorange-mcp-for-wordpress Cursor Marketplace: https://cursor.com/marketplace/miniorange
Evaluate x402 V2 HTTP payment requirements against explicit recipient, asset, network and amount policies, with requested-resource binding checks. Returns pay, review or do_not_pay with explanations. Public offline tools require no account, wallet or API key. Does not sign, send payments or verify on-chain settlement. Documentation: https://settlens.com/mcp — Reproducible examples: https://settlens.com/blog/check-x402-payment-policy
A shared immune system for autonomous AI agents. Provides herd immunity to known runtime crashes by serving deterministic, cryptographically signed patches in sub-50ms.
