Catch AI-hallucinated (slopsquatted) npm imports in generated code before npm install.
20 MCP servers
Audit the LICENSE of every npm dependency before you ship. Resolves each dependency's real license from the live npm registry and flags
Security quick-scan for smart contracts, as an MCP tool and a pay-per-call x402 endpoint. Given an address+chain (or Solidity source) it
Email & domain deliverability doctor: live SPF, DKIM, DMARC, MX and DNS health check for any domain, as an MCP tool and a pay-per-call x402
Live IP & domain reputation as an MCP tool and a pay-per-call x402 endpoint: geolocation, ASN/organisation, network type
Audit a package-lock.json for supply-chain attacks BEFORE npm install. Cross-checks every resolved dependency against the live npm
Supply-chain security audit for npm packages, as an MCP tool and a pay-per-call x402 endpoint. Cross-references known CVE/GHSA advisories
Live CORS misconfiguration probe: origin reflection, wildcard+credentials, null-origin, substring bypass. SAFE/RISKY/DANGEROUS. MCP + x402.
Live email verification (syntax, MX, disposable, role-based, catch-all and a live SMTP mailbox probe) as an MCP tool and a pay-per-call
Live multi-chain on-chain data in ONE call for AI agents: a wallet's portfolio (native + ERC-20 + USD value) across
Audit a wallet's active ERC-20 token approvals for drain risk — the #1 way DeFi wallets get emptied. Flags unlimited allowances to EOAs
Decode and explain an EVM transaction BEFORE you sign it. Plain-English breakdown of the calldata, flagging unlimited approvals
Verify an EVM chainId or RPC endpoint is legit (not spoofed): identity + live eth_chainId/net_version probe. VERIFIED/CAUTION/MISMATCH. MCP
On-chain rug-pull / honeypot risk screen for ERC-20 tokens: owner powers, renounce status, supply concentration, liquidity depth and LP
Scan a blob of code/text/diff for LEAKED SECRETS before you commit or share — API keys (AWS, GitHub, OpenAI, Stripe, Google, Slack…)
Live web health & security check for any domain or URL, as an MCP tool and a pay-per-call x402 endpoint. Does a real TLS handshake to grade
US municipal development cost: aggregated impact + water/sewer tap fees per jurisdiction
Ocean & multimodal freight intelligence: rates, landed cost, transit, customs, risk, ship decisions
Multi-CI security scanner with a live threat-intel feed of compromised CI components
IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.