"MCP servers that work without API keys" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
WHOIS, RDAP, DNS, IP / ASN / CIDR and Web3 name (ENS, Unstoppable, Handshake) lookups. No API key.
VPN, proxy, Tor, hosting and CDN detection for any IP address, from the VPNDetection API.
Technology intelligence feed for AI agents: tech stack, compliance, security.
Find lookalike domains of a brand's website and see which resolve and what they show.
Pre-trade token safety check for AI agents. Simulates a sell before you buy, then returns one low/medium/high/unknown verdict with the signals behind it: sellability, buy/sell tax, liquidity depth, pair age, same-ticker impersonation, owner powers from bytecode. Ethereum, BSC, Base, Solana. Fail-closed - a check that cannot run answers unknown, never low. Publishes its own measured error rate with the benchmark harness in the repo. Free, no signup, no API key, MIT.
Let your AI agent pay for APIs and data without handing it your money. In ChatGPT, Claude or Grok, the agent finds paid x402 APIs (with each seller's payout record from x402 Doctor) and asks to pay; you approve and sign each payment in your own wallet: MetaMask or Coinbase Wallet (USDC on Base), Phantom (USDC on Solana) or Xaman (RLUSD on the XRP Ledger). Fizzl checks every payment before you sign and every paid answer for hidden instructions. Fizzl never holds your keys. Free to start.
Runtime permission, approval, and audit layer for AI agent tool execution.
DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.
Prove end users to agents and apps: login-links, OIDC clients, and API keys over remote MCP
Is it DNS? Audit a site or domain that isn't working: one call says if it resolves and why. No key.
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
External checks of TLS, HTTP headers, email domain, DNS and ports, with cause and fix
Find lookalike domains of a brand's website: typos, swapped letters, look-alike characters, added words and other TLDs. Shows which of them resolve in DNS and what their front page shows. One read-only tool, no sign-up. Registry name: com.openbait/lookalike-domains. Web version: https://openbait.com/tools/typosquat-check
Free MCP server of security & dev API tools -- supply-chain, CVE, DNS, WHOIS, OFAC, Cosmos SDK.
Scan text for prompt injection: risk score, verdict, matched spans. Built by Crypto Money Maker
Pre-sign safety check for agent wallets: tx, EIP-712, EIP-7702, x402. By Crypto Money Maker
Streamable HTTP JSON-RPC 2.0 MCP Server exposing 9 deterministic B2B SaaS revenue leak detection, Visa CE 3.0 dispute evidence linting, and webhook security tools.
Find and redact leaked secrets, wallet keys and PII before an AI agent sends text.
Analyze DMARC reports and SPF/DKIM issues with Suped. - Review monitored domains and email authentication issues. - Download original DMARC report XML. - Add domains for monitoring. - Create client organizations as an MSP administrator. Your Suped permissions apply. Adding a domain does not change DNS; issues are read-only.
Machine-Readable Company Profiles: find, search and read any company's Trust Profile, fact by fact.
