The real catalog of tools for AI agents

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

MCP server for Google Workspace security auditing — login audit, external sharing, daily brief

Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

MCP server wrapping the UK aquaculture regulatory stack — CEFAS Fish Health Inspectorate AW1 APB

Scan websites for security vulnerabilities, headers, TLS, and email security.

AI website growth audits: SEO, performance, AI readiness (GEO), conversion, a11y, security.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Audit GitHub repos for malicious and supply-chain code before you depend on them.

DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring

EVM audit (Slither + source + security.txt + MCP-probe + wallet-exposure). 6 tools + /trace.

Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.