The real catalog of tools for AI agents

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

Network-egress firewall for agent tools: check URLs against a declarative policy.

MCP security trust-check for agents before installing MCPs, Skills or tools.

Local-first security check for AI coding agents: secrets, .env exposure, git-history leaks, CVEs.

Free spend report from an agent log, no key. Hosted proxies: caps, audit export, buy calls.

Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.

Live DNS, email-auth and redirect checks, HTTP security headers, uptime history, PC hardware prices.

Local spend caps, kill-switch blocking and Ed25519-signed receipts for AI agent tool calls.

MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.

Ybe Check – security and compliance orchestrator for AI-generated repositories.

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

Email security and AI discoverability scores for any domain, with the exact record or tag to fix.

AgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.

DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

Free front-end security check for any website: a grade plus the secrets and keys it exposes.

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.

Check whether text is valid JSON. The body is discarded.

CUID shape check

KSUID shape check