Picks the stack, security and compliance setup for what you're building, with today's prices.
Showing 1,585–1,632 of 1,661
Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.
Vanta compliance MCP server: vulnerabilities, tests, controls, evidence, people, vendors, docs
China trade compliance: 2026 tariffs, export-control entities, dual-use licenses & FTA origin rules.
Give your AI hands. Identity, credential vault, and API gateway for autonomous agents.
UK compliance documentation for the EU AI Act, Worker Protection Act 2024, and UK GDPR.
Scan website legal docs for missing or stale compliance clauses. Rule-based, no LLM.
Deterministic JSON hashing and EIP-712 attestations for AI agents via x402.
MCP server for AbuseIPDB: IP abuse reports, reputation. Free key.
Bitwarden public API: members, collections, groups, event logs.
Validate Bitcoin addresses offline with real base58check and bech32/bech32m checksums
Query Censys Search: host lookup by IP and host search with the Censys query language.
Certificate transparency lookups from Cert Spotter. No key required.
Query the Clerk Backend API (secret key; set CLERK_SECRET_KEY, Bearer): users, user details.
CVE Search: latest CVEs and vendor or product lookups from CIRCL - keyless.
CVE Services: authoritative CVE records - des MCP: real tools for real work.
MITRE CWE weakness records: descriptions, mitigations, consequences and the weakness hierarchy.
Password breach checks and identity security audits - no API key.
Delinea Secret Server API: secrets search and retrieval.
Email validation from the public Disify API. No key required.
DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.
Doppler API: projects, configs, secrets listing and download. Needs service or personal token.
EPA ECHO enforcement and compliance: find regulated facilities by state, city, ZIP or name and read.
Exploit Prediction Scoring System scores: how likely a CVE will be exploited in the next 30 days.
MCP server for GreyNoise: IP noise classification, tags. Free key.
Hash and HMAC text locally with MD5, SHA-1, SHA-256, SHA-384 and SHA-512, in hex and base64
Identify hash types offline: match a hex or crypt string against known algorithms and lengths
The Have I Been Pwned breach catalogue: every known data breach, one breach in detail and the
Infostealer breach intelligence from Hudson Rock. No key required.
Validate IBANs offline with the official length table and mod-97 checksum, country by country
Infisical API: manage secrets via universal auth.
IP address lookup with location and network details. No key required.
Decode JSON Web Tokens locally: header, claims, expiry timeline and warnings
Decode and verify JSON Web Tokens locally. No network and no key.
MCP server for Logto: users, applications. Works with Cloud or self-hosted.
Threat intelligence for IPs and domains from Maltiverse. No key required.
Search the MITRE ATT&CK enterprise knowledge base for adversary techniques and tactics.
Search CVE vulnerability records from the NIST NVD database. No key required.
NVD: search CVEs with severity and descriptions from the NIST database - keyless.
OFAC sanctions screening: search the SDN and consolidated lists by name, program or entity type and.
MCP server for OSV open source vulnerability data and package security checks.
Generate and verify time based one time passwords locally. No network and no key.
MCP server for AlienVault OTX: pulses, indicators. Free key.
Check if a password has appeared in known breaches without sending the password. No key required.
Generate strong random passwords locally. No network and no key.
Generate strong passwords and passphrases and estimate strength, offline with a crypto RNG
Score password strength locally with the zxcvbn algorithm. No network and no key.
Scan local or remote hosts for open TCP ports. Runs locally.
