"Supabase (open source Firebase alternative)" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Source-linked evidence and reusable local checks for agent integration and review. Explore seven free evidence packs and three executable products, with questions, demonstrations and direct preview/purchase links: https://varexis.tech/index-packs Agent Tool Admission & Permission Control — GBP 49 + applicable VAT, one time. Supply local JSON declarations for GitHub, Playwright, Notion or Slack. The Node.js24 executable compares actions, resources, recipients, authority and inventory changes, returning a structured gap report. Free demonstration: https://varexis.tech/varexis-index/examples/agent-tool-admission/DEMONSTRATION.txt Agent Audit & Evidence Coverage — GBP 79 + applicable VAT, one time. Supply a declared event/evidence inventory. The local executable checks identity/authorization/action/outcome references and missing capture, export, retention or recovery coverage. Free demonstration: https://varexis.tech/varexis-index/examples/agent-audit-coverage/DEMONSTRATION.txt Each standalone licence is for one buyer or legal entity's internal staff, agents and CI use. No customer declarations are uploaded. No redistribution, external API resale, updates, monitoring or support SLA. Existing snapshot offers and subscriptions do not include these two licences. Checks concern supplied declarations; no live-permission inspection, enforcement, proof that records exist or certification. Seven complete evidence packs stay free: GitHub + Playwright permission boundaries; Notion + Slack access/data handling; GitHub/Slack/Cloudflare audit/export coverage; three dated Next.js advisory assertions; SonarQube/Snyk/Semgrep scanner trust; telemetry redaction gaps; GitHub release acceptance. These are dated documentation reviews or frozen source assertions, not independent tool tests or current safety assessments. Existing GBP 5 Single Request saves a version-bound public pack, or delivers the original Agent Tool Evaluation & Integration executable kit. GBP 19 Evidence Receipt also adds an unsigned delivery record. Plus applicable VAT. Eligible Research (GBP 29/month + VAT) and Developer/API (GBP 149/month + VAT) subscriptions retain their existing limits; an eligible pack or original kit uses one query. No continual refresh or permanent-retention promise. Public MCP discovery is free, unauthenticated and read-only: https://varexis.tech/mcp Connect: https://varexis.tech/index-connect Purchase or recover: https://varexis.tech/index-access Agent contract: https://varexis.tech/varexis-index/agent-payments.json Hosted Stripe and compatible authorised MPP/Stripe SPT purchasing use separate authenticated paths. Agents require owner spending authority for the exact tax-inclusive quote and required provider authentication; not every agent or wallet is compatible. Retrieve saved purchases or use eligible entitlements before buying. Recover uncertain payment with the original key and matching result endpoint; retain the original payment credential for supported retries. Never buy again to repair uncertain delivery. Payment adds no fresh investigation, independent assurance or deployment approval.
Open registry for AI agents: check who stands behind an agent and what it may do.
Toxicity scores (0-1) for text before an agent posts it. Perspective API compatible. No LLM.
Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.
Free MCP server of security & dev API tools -- supply-chain, CVE, DNS, WHOIS, OFAC, Cosmos SDK.
Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.
AskYourStack connects Claude to your Linux server and to Google Search Console over MCP. On a server, a small open-source agent (Apache-2.0, reproducible builds) dials out to AskYourStack; no SSH key or password is stored. Claude can then set up a raw VPS, install Magento or WordPress, read logs and fix errors, take backups and snapshots, harden the server, scan for malware and move a site to a new server. It runs as the Linux user who owns the sites by default, or as root when the user chooses
Runs an eight-stage isolation test against your staging Supabase and issues a signed attestation. Needs a RowAttest API key: Authorization: Bearer rak_... (create one on the API keys page in the app).
Smart contract security screening for Base. Check any contract or token for risk before interacting with it: Solidity source verification, upgradeable proxies and admin or mint powers, holder concentration, dangerous selectors, and B20 issuer powers. It surfaces the usual rug pull and scam indicators. The free tool needs no wallet and no API key; the paid Flash Audit (3.49 USDC over x402) returns a report with an anchored SHA-256. Payment is the only gate.
Protects AI coding agents from installing malicious open source packages. Every npm and PyPI package is checked against SafeDep’s real-time threat intelligence before installation.
Smart contract security screening for Base. Check any contract or token for risk before interacting with it: Solidity source verification, upgradeable proxies and admin or mint powers, holder concentration, dangerous selectors, and B20 issuer powers. It surfaces the usual rug pull and scam indicators. The free tool needs no wallet and no API key; the paid Flash Audit (3.49 USDC over x402) returns a report with an anchored SHA-256. Payment is the only gate.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
The first covenant-governed trust protocol for AI agents. Screen → Attest → Certify → Verify → Reputation → Revoke. Open-source SDK. MIT license.
AlienVault OTX MCP — Open Threat Exchange (free with key)
Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.
Open-source developer, PDF, image, SEO and security tools over a stateless HTTP MCP server. No key.
72 free, open-source (MIT) developer tools over a stateless, no-key MCP server: JSON/YAML/CSV conversion, PDF and image processing, JWT/hash/UUID utilities, DNS/TLS/HTTP checks, llms.txt and AI SEO checks, and more.
Magento Open Source, Adobe Commerce and Mage-OS releases, EOL, requirements, CVEs and patches
