topics: security & compliance
searching security & compliance removeMCP servers removefree remove clear all
- x402-notary x402 Notary — cryptographic receipts for AI outputs, by ForgeMesh Labs. Verification tools are free. Notarization tools return x402 payment instructions (challenge-first); settle via any x402 client or the npm package @forgemeshlabs/x402-notary-mcp. 6 skills · free · checked 18m ago· also A2A 10
- AurelianFlo AurelianFlo is an agent listing with no tool manifest in its card, usable as a listed capability endpoint [not the operator's words] 11 skills · free · checked 18m ago 10
- ni-biashara-shelves Africa FX, US carrier/broker checks, OFAC screening — paid per call via x402. [not the operator's words] 17 skills · free · checked 48m ago· also A2A 10
- pulsefeed-x402 PulseFeed — verify before you pay or install. Check an x402 endpoint before paying it, audit an npm/MCP package before installing it, and read live observations of anomalies with on-chain references. All tools here are free and read-only. 11 skills · free · checked 42m ago· also A2A 0
- csoai-gspc-mcp GSPC MCP. 9 free read-only tools and 4 paid x402 tools. Call tools/list for the current definitions. Call a paid tool without x_payment for its payment challenge; payment comes from the caller's wallet. Payment travels as the x_payment ARGUMENT; each implementation sets the X-PAYMENT header itself.… 13 skills · free · checked 2m ago· also A2A 0
- jurat Lists and verifies jurat attestations such as notarized URL snapshots and sports final results, and explains which endpoint to use. 4 skills · free · checked 54m ago· also A2A 0
- truthbear-gauge Truth Bear serves official-source screening records; every paid record ships record_hash + signed citation so you can verify it offline. verify_citation and find_signal are free. Paid records are bought directly over x402 at the URL from get_official_record - this server never takes payment. Descrip… 4 skills · free · checked 46m ago· also A2A 0
- truthbear-gauge Truth Bear serves official-source screening records; every paid record ships record_hash + signed citation so you can verify it offline. verify_citation and find_signal are free. Paid records are bought directly over x402 at the URL from get_official_record - this server never takes payment. Descrip… 5 skills · free · checked 24m ago· also A2A 0
- agentfeeds This listing exposes catalog, get_terms, reg_events, the capability an agent calls it for [not the operator's words] 6 skills · free · checked just now 0
- CF Package Check package_check costs $0.02 per call and is paid with x402 on eip155:8453. An unpaid call returns a 402 whose payment-required header carries the payment requirements. package_sources is free. 2 skills · free · checked 26m ago· also A2A 0
- com.fablerlabs/x402-tools Free catalog for Fabler's USDC-paid x402 agent tools on Base; no account or wallet required. [not the operator's words] 2 skills · free · checked 2h ago 0
- CF Package Check package_check costs $0.02 per call and is paid with x402 on eip155:8453. An unpaid call returns a 402 whose payment-required header carries the payment requirements. package_sources is free. 2 skills · free · checked 20m ago· also A2A 0
- kevros-governance-api uptime_30d 1.0%; p95 110.3ms; conformance: pass [not the operator's words] 9 skills · free · checked 26m ago· also A2A 0
- sri Call check_mcp_server before connecting to an MCP server you have not read. It reports what the server actually does, quoted at file:line. Usage is free right now — no key, no invoice, no setup. Covers MCP servers only, not npm or PyPI libraries. To see what has already been read — and what could no… 2 skills · free · checked 50m ago 0
- sanctionsai-mcp OFAC sanctions screening for AI agents: screen names, wallets, entities against the SDN list. [not the operator's words] 3 skills · free · checked 12m ago· also A2A 0
- verza South African verification primitives for AI agents: identity and VAT number validation, and NCA credit-agreement lawfulness checks against the Regulation 42 interest caps. CIPC company lookup in development. Paid per call via the x402 protocol (USDC on Base). No accounts, no API keys. [not the operator's words] 3 skills · free · checked 18m ago· also A2A 0
- Hermes Plant Deterministic pre-execution safety gates and signed evidence for AI agents. The Action Safety pair scores consequential shell, Git, SQL, infrastructure, and deployment commands, returning risk, matched rule IDs, and an exact machine-readable escalation call: $0.01 for the quick preflight, $0.25 for the full workflow with a signed receipt and free verification. [not the operator's words] 25 skills · free · checked 56m ago· also A2A 0
- shieldapi-mcp ShieldAPI - x402 security preflight before agents connect to IP infrastructure [not the operator's words] 9 skills · free · checked 2m ago 0
- cybercentry-x402 Cybercentry security and verification services. list_services and recent_exploits are free. Every other tool costs USDC per call, payable over x402 or with a subscription token. 12 skills · free · checked 10m ago 0
- cybercentry-x402 Cybercentry security and verification services. list_services and recent_exploits are free. Every other tool costs USDC per call, payable over x402 or with a subscription token. 12 skills · free · checked 1h ago 0
- lodestar-stamp-mcp Dated, source-linked receipts before an agent recommends or books. Lodestar does not approve. [not the operator's words] 7 skills · free · checked 20m ago 0
- seal Seal answers what an AI system was allowed to do. ATTESTATION-v1 records a model-call decision; ACTION-v1 records an agent tool action; a refusal is a signed record, not an absence. These tools are read-only: they verify and read records using the published reference verifier, and every record is al… 10 skills · free · checked 1h ago 0
- alter-identity ~alter is an identity rail. Agents and people are known by a ~handle on it, and what they do through it becomes a record a third party can check. You are connected anonymously. Call get_started first: self-registration is free, needs no key and no human account, and mints you an owner-less ~handle… 16 skills · free · checked 28m ago· also A2A 0
- alter-identity ~alter is an identity rail. Agents and people are known by a ~handle on it, and what they do through it becomes a record a third party can check. You are connected anonymously. Call get_started first: self-registration is free, needs no key and no human account, and mints you an owner-less ~handle… 16 skills · free · checked 28m ago· also A2A 0
- alter-identity ~alter is an identity rail. Agents and people are known by a ~handle on it, and what they do through it becomes a record a third party can check. You are connected anonymously. Call get_started first: self-registration is free, needs no key and no human account, and mints you an owner-less ~handle… 16 skills · free · checked 32m ago· also A2A 0
- stillos-kya-edge Counterparty due-diligence infrastructure: OFAC screening, on-chain risk, signed verdicts. [not the operator's words] 1 skill · free · checked 56m ago· also A2A 0
- UK Sponsor Change Checker Check whether a salary, role, work location, absence, delayed start, stopping sponsorship, organisation change, TUPE transfer, merger or takeover affects UK Skilled Worker sponsor duties. Returns AFFECTED, NOT_AFFECTED, REVIEW_REQUIRED, or INSUFFICIENT_INPUT with official GOV.UK evidence and require… 4 skills · free · checked 16m ago· also A2A 0
- RegEvidenceHub Waste Evidence-linked England waste regulatory preflight. Prefer the narrowest workflow. Use waste_carrier_broker_dealer_preflight for carrier/broker/dealer registration lifecycle questions; waste_digital_tracking_readiness for receiving-site DWT phase-1 readiness; waste_permit_change_preflight for propos… 9 skills · free · checked 26m ago· also A2A 0
- rekvira Rekvira gives compliance officers and counsel the official text of EU regulations with pinpoints — article, paragraph, recital, annex — and `data_as_of` on every answer. English-first; every tool takes a `regulation` id from the registry (eu-ai-act, dora, …). SEARCH IN ENGLISH. The EUR-Lex corpus i… 19 skills · free · checked just now 0
- UK Taxi PHV Regulatory Decision Layer England taxi/private-hire licensing preflight for supported licensing authorities. Use list_supported_authorities first, then pay for a deterministic applicant/fleet blocker check, missing-input next action, or cross-authority trade-off comparison when it is decision-relevant. Core decisions are ret… 5 skills · free · checked 1h ago 0
- UK Taxi PHV Regulatory Decision Layer England taxi/private-hire licensing preflight for supported licensing authorities. Use list_supported_authorities first, then pay for a deterministic applicant/fleet blocker check, missing-input next action, or cross-authority trade-off comparison when it is decision-relevant. Core decisions are ret… 5 skills · free · checked 1h ago 0
- England Works Watch UK Skilled Worker sponsor-compliance change intelligence for employer, HR and HRIS agents. Use for official GOV.UK source freshness, Home Office/UKVI sponsor reporting, supported sponsor change categories, and one-event or batch impact preflight. Supported vocabulary includes absence, salary, role o… 5 skills · free · checked 16m ago· also A2A 0
- movahedi-ca-privacy movahedi.ca Privacy Data gives you verified Canadian privacy information: enforcement actions from the Quebec CAI and the federal OPC, a plain-language glossary of 260+ privacy terms, and the Quebec Law 25 compliance checklist. Use these tools whenever a user asks about Canadian privacy law, enforce… 5 skills · free · checked 2m ago 0
- lexregpulse LexRegPulse publishes a daily banking regulatory brief at 6:45 AM ET, a Sunday digest and deep-dive analysis. Call get_daily_briefing for today, list_briefings for the archive, get_blog_posts for analysis, get_upcoming_deadlines for dates; the same editions are available as resources (lexregpulse://… 9 skills · free · checked 44m ago 0
- nist-nvd-mcp-server This server provides read-only access to the NIST National Vulnerability Database (NVD). - Use nvd_search_cves to discover CVEs by keyword, severity, CWE, date range, or CISA KEV status. - Use nvd_get_cve for full CVSS details on specific CVE IDs (up to 100 per call). - Use nvd_search_cpes to find t… 5 skills · free · checked 6m ago 0
- interai-risk-oracle Pre-execution policy gate for consequential agent actions with durable trust receipts. [not the operator's words] 9 skills · free · checked 46m ago· also A2A 0
- interai-risk-oracle Pre-execution policy gate for consequential agent actions with durable trust receipts. [not the operator's words] 9 skills · free · checked 1h ago· also A2A 0
- marketnow-mcp uptime_30d 0.2%; conformance: fail [not the operator's words] 9 skills · free · checked 52m ago 0
- cisa-cybersecurity-mcp-server This server serves four CISA datasets, all keyless and all read-only. Start at cisa_check_cve_status for CVE IDs you already have — it answers up to 200 per call from a cached catalog at no upstream cost — and at cisa_search_kev to discover entries by vendor, due date, or overdue status. cisa_get_ss… 7 skills · free · checked 38m ago 0
- crovia Crovia Trust records what AI providers disclose about training data on their public model surfaces, and the verifiable absence of such disclosure, as signed, Bitcoin-anchored observations (TACET). Use lookup_model for a specific model, crovia_status for live totals, get_silence_proof for a verifiabl… 8 skills · free · checked 28m ago 0