Servers by baneado98

Catch AI-hallucinated (slopsquatted) npm imports in generated code before npm install.

Audit a package-lock.json for supply-chain attacks BEFORE npm install. Cross-checks every resolved dependency against the live npm

Supply-chain security audit for npm packages, as an MCP tool and a pay-per-call x402 endpoint. Cross-references known CVE/GHSA advisories

Live CORS misconfiguration probe: origin reflection, wildcard+credentials, null-origin, substring bypass. SAFE/RISKY/DANGEROUS. MCP + x402.

Verify an EVM chainId or RPC endpoint is legit (not spoofed): identity + live eth_chainId/net_version probe. VERIFIED/CAUTION/MISMATCH. MCP

Scan a blob of code/text/diff for LEAKED SECRETS before you commit or share — API keys (AWS, GitHub, OpenAI, Stripe, Google, Slack…)

Live web health & security check for any domain or URL, as an MCP tool and a pay-per-call x402 endpoint. Does a real TLS handshake to grade

Multi-CI security scanner with a live threat-intel feed of compromised CI components

IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.