Security & Testing MCP Servers

Check if a package or MCP server is safe before installing. Find tools, connectors, datasets.

Persist failure simulations. No external fault injection or transfers. Customer key required.

$0.01/call via x402: OFAC wallet screen, DNS, email auth, domain age, email verify, URL unshorten.

Audits any Base/EVM address for bytecode risk, proxy patterns, honeypot selectors, and balance.

Who can change an EVM contract or Safe: proxy admin, owner, Safe signers, timelock. Free alerts.

Tells your agent if a link is safe before it clicks, signs in or pays.

Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.

ProofRun: bounded HTTP acceptance checks for agent deployments. $0.01 USDC per pack.

ProofRun: bounded HTTP acceptance checks for agent deployments. $0.01 USDC per pack.

Disposable test inboxes for agents: create an address, then wait for its code or link.

Prove a web page or document existed on a date: public SHA-256 registry anchored in Bitcoin. Free.

Verify a running web app from the inside over MCP: look, act, observe, assert. No screenshots.

Crypto forensics with sources: deployer records, OFAC matches, exchange and bridge attribution.

Kostenlose Sicherheits-Checks ohne Konto: SPF/DKIM/DMARC, Mails, Links, Webseiten, Passwort-Leaks.

Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.

Signed EOL dates, exploited CVEs and LLM prices; pay per call in USDC, no account, no daily cap.

UK sanctions, export controls, Companies House owners, FCA register and property checks.

GuardBee MCP bridge to Agent Threat Rules (ATR) for runtime agent/MCP threat detection

Answers EU Digital Product Passport questions: scope, required fields, registry and law changes.

Screen names/IDs against Ukraine's NSDC State Sanctions Register (snapshot) via Apify.

Independent checks of paid x402 data sellers and of AI-agent access to shopping and travel sites