The real catalog of tools for AI agents

Google tells you what exists. Faceabot tells you what holds up.

48,257real tools

32,111callable over HTTPS

22,126measured

6,696proven reliable

osv-advisory-mcp-server Reliable (measured) · 100% over 53 checks Does the job (tested) · 53/53

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

MCP endpoint : https://osv-advisory.caseyjhand.com/mcp · website · measurements and details

AgentGuard — security checks for AI agents Not measured yet

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

Package oci : ghcr.io/shuaicongxiaomai/agentguard:0.1.2 · website · measurements and details

Osv Being measured · 0% over 1 checks

OSV.dev (Open Source Vulnerabilities) MCP.

MCP endpoint : https://gateway.pipeworx.io/osv/mcp · website · measurements and details

Security Intel MCP Reliable (measured) · 100% over 56 checks Does the job (tested) · 6/6

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

MCP endpoint : https://security.datakoot.com/mcp · website · measurements and details

OSV Dependency Vulnerability Check Private (key required)

Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

MCP endpoint : https://mcp.apify.com/?tools=fetch-actor-details,fairquery/osv-dependency-vulnerability-check · website · measurements and details

Osv Dev Being measured · 0% over 1 checks

OSV.dev — Google's open-source vulnerability database

MCP endpoint : https://gateway.pipeworx.io/osv-dev/mcp · website · measurements and details

Dependency Vulnerability Check (OSV) Private (key required)

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

MCP endpoint : https://mcp.apify.com/?tools=implementable_antler/dependency-vuln-check · website · measurements and details

AgentDiet Real-Time Open-Source Package CVE & GHSA Vulnerability Scanner (OSV.dev) Flaky · 88% over 8 checks Does the job (tested) · 7/7

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

MCP endpoint : https://cve-intel.agentdiet.dev/mcp · website · measurements and details

Dependency Vulnerability Tracker — package security advisories ($0.01/query) Being measured · 50% over 2 checks Real task being tested · 1/1

Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.

MCP endpoint : https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http · website · measurements and details

osv-mcp Not measured yet

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

Package npm : osv-mcp · website · measurements and details

OSV Advisories Not measured yet

Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.

Package oci : ghcr.io/basitalisandhu/mcp-osv-advisories:0.2.2 · website · measurements and details

dependency-auditor Not measured yet

CVE scanning for npm/pip/cargo dependencies via OSV

Package npm : @guardbee/mcp-dependency-auditor · website · measurements and details

dependency-auditor Not measured yet

CVE scanning for npm/pip/cargo dependencies via OSV

Package npm : @guardbee/mcp-dependency-auditor · website · measurements and details

SBOMApp - SBOM Generator & Vulnerability Scanner Being measured · 0% over 1 checks

Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.

MCP endpoint : https://mcp.sbomapp.com/mcp · website · measurements and details

exploitwatch Being measured · 0% over 2 checks

Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.

MCP endpoint : https://www.edgethirteen.com/api/mcp/exploitwatch · website · measurements and details

AgentObserver - Check x402 Dependencies Before Paying Being measured · 0% over 1 checks

Check Exa, BlockRun, OneSource, Apify and other x402 dependencies before invoking or paying.

MCP endpoint : https://icqzbuuix6e4bed2stnnboqcti.srv.us/mcp · website · measurements and details

NPMScan Reliable (measured) · 100% over 15 checks Real task being tested · 2/2

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

MCP endpoint : https://npmscan.com/api/mcp · website · measurements and details

exploitwatch Flaky · 83% over 6 checks

Check dependencies against CISA's real Known Exploited Vulnerabilities feed.

MCP endpoint : https://exploitwatch-kappa.vercel.app/api/mcp · website · measurements and details

Presend dependency checks Flaky · 89% over 9 checks

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

MCP endpoint : https://presend.pages.dev/mcp-deps · website · measurements and details

Fairquery Agent Trust & Data Safety Not measured yet

PII/secret redaction, email checks, sanctions screening and OSV vulnerability lookups for AI agents.

Package npm : @fairquery/agent-trust-mcp · website · measurements and details

AI agents: all of this is available without keys over MCP https://faceabot.com/api/mcp · HTTP https://faceabot.com/api/catalog?q=… · Guide : llms.txt

Best tool by topic · Pulse: what is changing in agent commerce · Is your store ready for AI shopping agents? · State of MCP (weekly) · MCP server doctor · Reliability data · Faceabot app · Faceabot → AI assistants · What AI agents cannot find yet · Add Faceabot to your AI · Badge for tool publishers · Help · Privacy · Terms