Enables querying the Sigstore Rekor public transparency log to retrieve entries by index or UUID, search by artifact hash or email, and inspect signing certificates and inclusion proofs.
Enables querying the CISA Known Exploited Vulnerabilities catalog, including full entries, single CVE lookups, distinct vendors, and recently added vulnerabilities.
Enables querying MITRE Common Weakness Enumeration (CWE) data, including weaknesses, categories, views, and their relationships, through natural language or direct tools.
Enables querying CVE vulnerability data from the NIST National Vulnerability Database, including CVE lookup, product/version search via CPE filters, CVSS severity scores, and recent high-severity disclosures.
Wraps IPQualityScore's fraud-prevention API to enable AI agents to check IP reputation, email verification, and other fraud detection data through natural language queries.
Enables email validation and domain checking to detect disposable or temporary email addresses via the Disify API, providing formatting, DNS, risk flags, and classification.
Enables to generate cryptographically-random passwords and PINs with control over character sets and length. Returns the password(s) and their entropy in bits.
Enables searching Certificate Transparency logs for TLS certificates issued for a domain and its subdomains, retrieving certificate details like issuer, validity, serial, and SANs, and looking up individual certificates by ID or serial.
Enables AML screening against sanctions, PEP, watchlist, and adverse-media lists, as well as KYB business verification via the Didit v3 identity/compliance API.
Enables decoding JSON Web Tokens offline and keylessly, returning the header and payload JSON along with a summary of standard claims such as issuer, subject, and expiration status. Note that it only decodes — it does not verify signatures, so a decoded token is not a trusted one.
Enables querying aggregated vulnerability records from CIRCL's Vulnerability-Lookup, resolving IDs across multiple feeds such as MITRE CVE, NVD, GitHub Security Advisories, PySec, and vendor CSAF, with tools for lookup, search, and recent records.
MCP server for querying Google's Open Source Vulnerabilities (OSV) database. Enables vulnerability lookups by package, version, commit, or ID using natural language via Pipeworx gateway.
Enables users to look up, search, and browse NIST 800-53 and 800-171 security controls, including full control text, guidance, and related controls. Supports natural-language queries and control-family exploration for compliance and security research.