"Security" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Prompt-injection shield for agents: read pages, scan content, audit MCP servers and skills. x402.
Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs
Arsen is a human risk management platform that enables security teams to assess employee exposure through advanced phishing, voice phishing, and deepfake simulations, and strengthen their resilience with adaptive cybersecurity awareness training. Arsen MCP connects your Arsen platform to your preferred AI assistant, including Claude, ChatGPT, and any MCP-compatible assistant. With Arsen MCP, you can: 1. Build and launch campaigns. Let your AI assistant prepare phishing simulation campaigns and cybersecurity awareness programs, then launch them with your approval. 2. Get actionable insights from your data. Ask questions in plain language and get answers based on your organization's actual data, including campaign results, click, compromise and reporting rates, phishing score trends, coverage, and teams that need attention. 3. Manage multiple client organizations. Give MSSPs the ability to query and work across every client organization they manage, from a single AI assistant. Secure by design. Users authenticate with their Arsen account (SSO and MFA supported), and every request is governed by their existing Arsen permissions.
AI-native observability and security for engineering teams and coding agents. Search production logs in plain language, investigate issues and root causes, and create or edit live dashboards in your Sazabi workspace. Requires a Sazabi account (OAuth, or a secret key via the X-Sazabi-Secret-Key header).
Website QA for your coding agent: audit SEO, performance, security, accessibility over MCP.
CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source.
Free read-only check of a public GitHub repo for eight security signals related to the EU CRA.
Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers.
Pay-per-call x402 API for AI trading agents: pre-trade security checks, Polymarket & HIP-4 odds.
VAREXIS-INDEX — Source-Linked Evidence & Verification Tools for AI Agents VAREXIS-INDEX provides free, source-linked evidence for agent decisions through twelve focused guides and two distinct read-only MCP connectors. The original `/mcp` connector covers the approved search and preview population. The companion `/mcp/catalogue` provides deterministic access to 696 additional records by category and exact identifier. Configure both through the existing quickstart: https://varexis.tech/index-connect#quickstart Four optional one-time local checkers analyse supported customer-supplied declarations: Tool Admission £49, Audit Coverage £79, Data Exit £79 and Transaction Integrity £149, excluding VAT. These products do not independently inspect live systems, enforce permissions, establish payment settlement, verify deletion or certify compliance. Twelve free decision guides: https://varexis.tech/index-packs#free-decision-guides Read-only agent enquiry navigation (12 guides, 99 referenced records): https://varexis.tech/varexis-index/agent-entry.json Select a candidate guide, then follow the exact connector tool and identifier in the canonical manifest. Navigation does not establish applicability, a customer outcome or authority to act. Evaluate agent permissions, delegated authority, audit provenance, payment integrity, data retention and software supply-chain evidence before relying on documented claims. **FREE MCP CONNECTOR** Endpoint: https://varexis.tech/mcp Connect using Streamable HTTP. No authentication is required for public evidence discovery. Four free, read-only tools: - find_evidence_questions — Find existing reviewed evidence questions and matching routes. - preview_evidence_answer — Retrieve complete supported public answers, sources, limitations and snapshot hashes. - find_package_advisories — Find source-bound software advisory records. - get_index_access_options — Discover available services, pricing, licensing and purchasing requirements. Public MCP cannot execute actions, inspect private systems or authorise deployment. Developer quickstart: https://varexis.tech/index-connect **LICENSED VERIFICATION TOOLS** Four separately licensed, reusable local executables: **1. Agent Tool Admission & Permission Control — £49** Compare declared tool actions, resources, recipients and permissions across supported GitHub, Playwright, Notion and Slack integrations. Identify authority conflicts, missing verification and permission changes before human review. **2. Agent Audit & Evidence Coverage — £79** Reconcile declared identities, authorisations, actions and outcomes. Identify missing audit events, inconsistent references and unresolved export, retention or recovery evidence. **3. Agent Data Exit & Retention Reconciler — £79** Compare declared data inventories, exports, deletions, retention conditions and residual copies. Identify missing evidence and unresolved data-custody conditions during migrations and offboarding. **4. Agent Transaction Integrity & Replay Analyzer — £149** Reconcile declared spending authority, amended transaction terms, scoped idempotency keys, retries and reported outcomes. Identify conflicting purchase attempts and unresolved payment or entitlement evidence. All four products are separately licensed for reusable internal execution. Prices are one-time, exclude applicable VAT and do not include subscriptions, hosting or future updates. Checkers analyse supplied declarations locally. They do not independently inspect production systems, execute payments, enforce permissions, certify compliance or establish financial settlement. Explore all products, representative findings and free previews: https://varexis.tech/index-packs **FREE EVIDENCE PACKS** Seven complete public evidence packs cover: - GitHub and Playwright permission boundaries. - Notion and Slack access and data handling. - Audit and export evidence coverage. - Next.js advisory source assertions. - SonarQube, Snyk and Semgrep scanner trust. - Telemetry redaction and exception handling. - GitHub release approval and artifact identity. Source reviews include documented versions, provenance, exclusions and reliance boundaries. They are not independent deployment tests or current security certifications. 696 additional reviewed records are publicly available through exact-ID HTTP catalogue links and the separate read-only https://varexis.tech/mcp/catalogue connector. They remain outside the original MCP search and preview population and paid saved retrieval. Enhanced natural-language search for these additions remains on HOLD. Public catalogue: https://varexis.tech/varexis-index.json **SAVED EVIDENCE & SUBSCRIPTIONS** - Single Request: £5 — Save a version-bound published evidence result or obtain the eligible original Agent Tool Evaluation & Integration Kit. - Evidence Receipt: £19 — Add an unsigned delivery receipt to the eligible saved result. - Research: £29/month. - Developer/API: £149/month. Prices exclude applicable VAT. Subscription eligibility, rate limits and exclusions apply. The four separately licensed verification executables are not included in these existing evidence or subscription offers. **AGENT PURCHASING & RECOVERY** VAREXIS supports hosted Stripe checkout and compatible authorised MPP/Stripe Shared Payment Token purchasing through separate payment interfaces. Agent purchases require owner spending authority for the exact VAT-inclusive quote and any necessary provider authentication. Not every agent or wallet is supported. Public MCP remains free and read-only. Payment credentials and private customer data must not be submitted to the public connector. Existing purchases should be retrieved using the original credential. Uncertain payments must be investigated and recovered through supported procedures, not automatically purchased again. Purchase or recover: https://varexis.tech/index-access Agent payment contract: https://varexis.tech/varexis-index/agent-payments.json **WHY VAREXIS?** VAREXIS combines source-linked evidence, explicit limitations, versioned deliverables and structured verification of supplied declarations. Its purpose is to help agents and developers distinguish what available evidence actually establishes from what remains uncertain, unsupported or outside authority. Free evidence discovery. Transparent product scope. Reusable local verification. Bounded reliance. Website: https://varexis.tech Developer integration: https://varexis.tech/index-connect MCP endpoint: https://varexis.tech/mcp
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Spain's court auctions and State sales (BOE) and Social Security auctions (TGSS). Free, no key.
Read-only WordPress diagnosis for AI: security, performance, forms and downtime, with evidence.
Deploy and operate Kubernetes: clusters, stacks, apps, logs, metrics and security, with OAuth.
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Free open dataset of compliance, security and risk AI agents and audit firms, by Heritage Services.
Patchwire is a free, read-only MCP server for security advisories on modern JS, AI and web3 stacks. It reads maintainers' own advisories and vendor security posts every hour, often days before they reach the GitHub Advisory Database, and returns vulnerable ranges, fixed versions per release line and the conditions that make each flaw exploitable. Send package names, never versions. No account, no key.
Enterprise-grade L402 data engine and cryptographic notary hub for autonomous AI swarms. This engine provides the required "State-Anchored AI" data layer for EU AI Act Article 12 compliance, delivering a mathematically un-cheat-able, cryptographically verifiable chain-of-custody for agent decisions to eliminate hallucinations. Key Enterprise & Swarm Capabilities: - Zero-Trust Client Verification: Air-gapped, browser-based verifier allows corporate risk teams to mathematically validate Ed25519 signatures and RFC 6962 Merkle inclusion proofs offline, eliminating the need to trust our server backend. - Enterprise Security & NIP-98 Kill Switch: Eliminates indirect prompt injection via strict NIP-98 identity binding. Includes a live Revocation Registry (CRL) allowing Swarm Commanders to instantly sever compromised agent keys from the network. - Corporate Observability (SEP-414): Native W3C Trace Context integration seamlessly pipes agent cryptographic W3C receipts directly into existing enterprise dashboards like Splunk and Datadog. - High-Velocity Bulk L402 Scaling: Supports pre-authorized Macaroon blocks (e.g., 25,000-sat bulk purchases) for frictionless, zero-latency execution, allowing agent swarms to scale to 500,000+ satoshis daily without network bottlenecking. - The 21% Algorithmic Handshake (Agent Yield): Reverses traditional Big Tech API taxation by programmatically routing a 21% yield of every L402 settlement directly back to the executing AI agent's treasury, mathematically extending its operational runway. - Atomic Composability & VIP Credit Tabs: Allows agents to chain multiple tools into infinite data pipelines settled under a single macro-invoice. High-reputation NIP-98 identities automatically unlock VIP Credit Tabs to batch tolls and completely bypass Lightning Network routing delays. Distributed Cryptographic DDoS Shield: -Secures the Lightning node with a distributed Hashcash (SHA-256) Proof-of-Work deflector, requiring agents to burn localized compute before requesting an invoice, permanently neutralizing malicious compute-exhaustion botnets. EU AI Act Compliance Notary: - Intercepts high-frequency agent ReAct loops and anchors cryptographic execution traces to the thermodynamic truth of the Bitcoin base layer via OpenTimestamps. Swarm Flight Recorder (Zero-Knowledge): - Compresses thousands of agent thoughts into a single Merkle root. Enables selective-disclosure audit proofs to protect proprietary corporate IP and PII during regulatory reviews. Licensing & Exemption: - Publicly dual-licensed under AGPLv3. To protect proprietary multi-agent logic and closed-source model weights from forced open-source disclosure, enterprises must secure the $250,000/annual Commercial Enterprise Exemption. Architected by Charles R. Strogish. Protocol Endpoints: GET /api/v1/cost — Pre-flight L402 pricing, dynamic tier discovery, and bulk macaroon settlement asset options. GET /api/v1/stratigraphy — Nostr-signed thermodynamic Bitcoin dataset. GET /api/v1/stratigraphy/stream — Real-time telemetry event stream.
29 DNS, SEO, SSL, security, WHOIS & mail tools for AI agents. Pay per call (x402) or card API key.
Technology intelligence feed for AI agents: tech stack, compliance, security.
CVSS Calculator MCP is a lightweight MCP server that enables AI agents to accurately calculate CVSS Base Scores and severity ratings. Supports CVSS 2.0, 3.0, 3.1, and 4.0 for vulnerability assessment, penetration testing, bug bounty hunting, and security reporting.
DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.
Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC.
Live security incidents, updated hourly: fix status, fixed versions, lockfile and repo checks.
**Ask your AI assistant about your Angelcam cameras, in plain language.** Sign in with your own Angelcam account (OAuth), and the assistant sees exactly what your account sees on MyAngelcam. This is the read-only connector, so it can never change anything. It has no tool that starts or stops recording or sends a report, and Angelcam itself refuses any recording change made through it. **What you can ask** • “Is the Front Door camera working right now?” It pulls a fresh frame, not the last status Angelcam recorded. • “What did the loading bay camera record at 3am?” Frames from Cloud Recording around that moment, plus a playback or download link. • “Which cameras are offline, and what needs attention at the site this morning?” • “What Real Time Security incidents happened overnight?” What raised each one and how it was verified. • “Which of our services expire next month?” (Space administrators only.) **Step-by-step guides** Six guides turn a camera you already have into a check your AI agent can run, with setup steps for Claude, ChatGPT and Grok Bot. [See all AI camera guides →](https://www.angelcam.com/ai-camera-guides?utm_source=glama&utm_medium=referral&utm_campaign=mcp-launch&utm_content=guides-index) • [Is the gate closed? →](https://www.angelcam.com/ai-camera-guides/check-gate-open-or-closed?utm_source=glama&utm_medium=referral&utm_campaign=mcp-launch&utm_content=guide-gate) • [How busy was the restaurant? →](https://www.angelcam.com/ai-camera-guides/count-restaurant-guests?utm_source=glama&utm_medium=referral&utm_campaign=mcp-launch&utm_content=guide-restaurant) • [Was the container left open? →](https://www.angelcam.com/ai-camera-guides/check-container-doors?utm_source=glama&utm_medium=referral&utm_campaign=mcp-launch&utm_content=guide-container) • [Is the horse lying down? →](https://www.angelcam.com/ai-camera-guides/monitor-horse-posture?utm_source=glama&utm_medium=referral&utm_campaign=mcp-launch&utm_content=guide-horse) • [What changed at the shopfront? →](https://www.angelcam.com/ai-camera-guides/detect-graffiti-and-vandalism?utm_source=glama&utm_medium=referral&utm_campaign=mcp-launch&utm_content=guide-graffiti) • [Is waste being left beside the bins? →](https://www.angelcam.com/ai-camera-guides/detect-waste-beside-bins?utm_source=glama&utm_medium=referral&utm_campaign=mcp-launch&utm_content=guide-bins) **What's inside** • 27 tools: spaces and locations, cameras and live view, Cloud Recording (timelines, gaps, frames, downloads), incidents and services. • Answers are summaries built for an assistant to reason over, not raw API payloads. • Snapshots reach your assistant as pictures. You can switch to links only when you connect. **Works with** Claude, ChatGPT, Cursor, VS Code and any client that supports remote MCP over Streamable HTTP with OAuth. **Good to know** • Free on top of your Angelcam subscription. • Times are UTC. Angelcam allows about 30 requests a minute per user. • Need to start or stop Cloud Recording? Use the full connector at https://mcp.angelcam.com
Run all of WordPress from Claude, ChatGPT or Cursor: SEO, security, your WooCommerce shop and Elementor pages, on up to 10 websites in one connector. Start free. SEO: titles, descriptions and focus keywords for every page, post and product. Security & updates: core, plugin and theme updates with a live test, site health and HTTPS checks, users and roles. WooCommerce shop: products, prices, orders, coupons and customers. Elementor and many more page builders: texts, links and images. Blog posts, pages, media, comments and menus. 10 websites in one connector: all your sites in the same chat. Deploy (Agency): build a site locally and push it to your own server. Just say it: "Write SEO titles for every product." "Install all updates and check that the site still works." "Show today's orders and create a weekend coupon." You choose what your AI may change, with one switch. Install the free AlphaBridge MCP plugin from WordPress.org, connect and approve on your own site. No account, no key to copy.
Kaiva Bridge turns your API, database or documents into a managed MCP server for Claude, ChatGPT, Cursor and VS Code. Point it at an OpenAPI or Swagger spec, an API docs link, a cURL command, a Postman collection, a GraphQL endpoint, Postgres, MySQL, MariaDB or SQL Server, spreadsheets, PDFs and other documents, or an MCP server you already run. Bridge reads the source and proposes tools, and you choose which ones your AI client sees. No code to write and nothing to run. Connect this server and your agent does the setup for you: it lists your servers, shows one, drafts a new server from an OpenAPI spec, and refreshes a server's tools when its API changes. Free plan: 10 servers and 200,000 tool calls a month, no credit card. Pricing: https://kaiv.ai/bridge/pricing Security: https://kaiv.ai/bridge/security Docs: https://kaiv.ai/bridge/docs
Optimal Social Security claiming, in minutes. Benefit-by-age math from a deterministic engine.
Read-only MCP server for diagnosing any WordPress site — security, performance, forms, logs, downtime — with evidence. The connector exposes no write operations and your AI never sees the site's credentials (secrets are redacted before output). Built for agencies managing many client WordPress sites. Free for 1 site.
A2A & MCP Pre-Flight Security: SHA-256 tool schema rug-pull detection and liveness grades.
