The real catalog of tools for AI agents

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

Scan what a public site or AI-built app exposes. Returns a signed, exploitability-graded claim.

PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level

Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface

Expert witness simulation for litigators: likely opinion, cross-exam and Rule 702 attack surface.

Drive ASMHunter attack-surface monitoring from an AI agent: recon, scans, findings, reports.

Deterministic DOM perception for AppSec red teams and AI agents: live Chrome, attack-surface scans.

Discover mobile app attack surfaces via BeVigil OSINT — hosts, subdomains, URLs, and more.

Every runZero query, plus a local SQLite copy of your whole attack surface that diffs over time

Statically audits MCP tool surfaces for token cost, schema quality, and design issues.

Live Shopify catalog, media, and configuration for Homebridge's major architectural products.

Five free MCP tools, including proof-before-payment preview, plus one authorized x402 pack.

Search and read the Agent Surface guide to making websites, apps, APIs and CLIs work with AI agents.

Helps people name what they feel: 796 feeling words and a body map of 243 sensations.

x402 MCP web parser: URLs to Markdown for agents. USDC on Base, Polygon, Arbitrum, Ethereum.

Query and retrieve information about various adversarial tactics and techniques used in cyber atta…

NWS surface wind observations (ASOS/AWOS) via Weather.gov and Iowa Environmental Mesonet APIs

Browse Aevum Security's Singapore cybersecurity services and submit a business enquiry.

Search the MITRE ATT&CK enterprise knowledge base for adversary techniques and tactics.

Free IPv4 lookups against a distributed attacker-observation corpus.