Cybersicherheit

NVD MCP — wraps the NIST National Vulnerability Database API.…

Supply chain security: free npm lockfile malware check, paid scan of packages, skills, MCP servers.

Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted

Security checks for AI agents and MCP configs: 124 tested checks, from your AI coding assistant.

Look up NVD CVE dates, status, numeric CVSS scores and severity

Local credential broker: agents call APIs, SSH and DBs via scoped presets; secrets stay in keychain.

Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports

Autonomous AppSec & DAST scanner across 12 security domains (260+ controls) with 3-Layer Triage.

Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC.

MCP server for running Ox Security MegaLinter via mega-linter-runner

Open-source AI context firewall for governed model, retrieval, memory, and tool access.

Audit your MCP servers for poisoned tools and leaked secrets, and check AI-generated code for flaws.

MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…

21 world data tools: airports, units, markets, security, travel meds, pet entry. x402 per call.

Manage Fly.io apps, Machines, volumes, secrets, Managed Postgres, and Sprites with OAuth.

Rank vulnerabilities by whether the vulnerable code path is reachable in your code.

MalwareBazaar MCP — abuse.ch malware sample database (free, key required)

Passive AI-agent readiness scan of a website: robots, llms.txt, JSON-LD, MCP discovery, security.

Security patrol management: missed rounds, suspicious scans, incidents and checkpoint setup.

Audit active CISA KEV ransomware CVEs, SSL/TLS CT log subdomains, SPF/DMARC security & ICANN RDAP.

Verifiable agent evidence; opt-in Codex guard and reference SOC alert review.

Agent security pre-checks: prompt-injection scan, MCP tool-poisoning scan, x402 endpoint check.

MCP server for ALTR data security: databases, tags, policies, classification, access, audits

Agent-safe secrets (local encrypted vault or Vaultwarden): injected into commands, masked in output