"OWASP Dependency-Check" matching MCP connectors:

One-step legal compliance for vibe-coded apps: privacy, terms, cookie banner and EU AI Act check.

EOL dates and risk scores for 485 software products. Check versions, score risk, audit stacks.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

GitHub project health, package dependency risk, trending repos, license & package comparison.

Verify B20 tokens on Base: issuer powers, imposter detection, signed EIP-712 verdicts.

Pre-flight check for AI coding agents: hallucinated packages + hardcoded secrets. Free, no account.

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Trust scoring for x402 endpoints — "should my agent pay this?" check_endpoint runs live diligence: x402 spec-compliance probe, price sanity vs market percentiles, payTo wallet on-chain activity (Base), directory presence, infra hygiene. Returns 0-100 score with per-check evidence. compare_price positions any price vs category market data. Pay-per-call via x402: $0.02/call USDC on Base, no account or API key. tools/list free.

Solana pre-trade safety for agents: rug check, honeypot sell-sim, drainer scan, tx preflight.

Live x402 endpoint trust/diligence check before you pay it. $0.02/call via x402.

check-package: block malicious npm/PyPI deps before your AI agent installs them. Free, no key.

Check email deliverability for a domain: MX, SPF, DKIM, DMARC, blacklists. Graded, no key.

x402-gated safety checker for npm and PyPI packages. Built for AI coding agents to call before running npm install or pip install — flags nonexistent/typosquatted names, known CVEs (OSV.dev), and suspiciously new or low-download packages. $0.005 USDC per check on Base mainnet

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

Is this AI agent or x402 service real and settlement-backed before you pay it? Trust check.

Risk-ranked registry of AI tools: look up an AI tool's risk or check if a domain is shadow AI.

OWASP MCP — keyless.

AI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents.

AI-powered scam detection for suspicious texts, emails, and screenshots. US-focused.

Check if a counterparty is safe to pay: trust/risk score for AI agents. Scam/phishing screen.