A local MCP daemon that turns an agentic coding client into a bug bounty operator, with 103 tools for offensive security testing including MITM proxy, traffic analysis, and OOB callbacks.
Enables checking IP reputations and threat intelligence by querying Chaitin's global honeypot network and millions of defense nodes. Provides real-time IP profiling, malicious behavior detection, and threat alerts based on aggregated security data.
Enables AI assistants to perform password security auditing using John the Ripper on a remote Kali system via SSH, supporting cracking, hash management, and session control.
Enterprise-grade code intelligence server for AI assistants that analyzes codebases for due diligence, tech debt, security vulnerabilities, and code quality.
Enables agents to prove and verify that a real, unique human performed an action, issuing machine-readable signed credentials with public verification.
Enables AI agents to log, evaluate, and ground consequential decisions against an organization's authority graph, creating a traceable audit trail for governance.
Enables AI agents to verify Israeli companies and assess supplier invoice and payment risk before sending funds, exposing registry-backed evidence, company-change events, invoice gates, and x402 payee-trust checks with deterministic PAY/HOLD/BLOCK and ALLOW/REVIEW/DENY outcomes. It also provides free previews and schema/service discovery tools over remote MCP.
Enables MCP-compatible AI clients to securely access a user's personal context by exposing connector data, starting with recent Spotify listening activity, through per-user OAuth and tools.
An MCP server that provides email verification, bulk list cleaning, and signup risk assessment tools. It exposes three typed tools for agents: verify_email, clean_email_list, and assess_signup_risk, with real DNS MX checks and disposable domain detection.
Living off the Land intelligence for AI agents. GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs, LOLC2 and more — unified into a single MCP server.
Enables authorized web/API security analysis as a stateful, multi-stage workflow with persistent session state, human-controlled validation, candidate versus confirmed finding tracking, and stop conditions.
A verifying MCP gateway that pins approved tool manifests and skill files to content addresses, blocking tampered descriptions before they reach model context.
Enables AI agents to run domain and website intelligence checks, including WHOIS/RDAP, DNS and email security, TLS headers, subdomains, tech stack, contacts, SEO, Core Web Vitals, sitemaps, and Wayback page diffs, using the caller's own Apify token.
Aggregates real-time threat intelligence from multiple sources including Feodo Tracker, URLhaus, CISA KEV, and ThreatFox, with IP/hash reputation checking via VirusTotal, AbuseIPDB, and Shodan for comprehensive security monitoring.
MCP server for GreyNoise threat intelligence, enabling IP analysis, GNQL queries, tag and vulnerability lookups, and session/pcap retrieval via natural language.
19 tools for crypto token risk intelligence. Detect rug pulls, honeypots, and scams before your agent transacts.
Works with Claude Desktop, Cursor, Windsurf, and any MCP-compatible client.