Audit AI applications and agents for security risks before commit, PR, merge, or deployment. Deterministic findings with coverage and evidence receipts.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Production-Ready MCP Server Framework • Build, deploy & scale secure AI agent infrastructure • Includes Auth, Observability, Debugger, Telemetry & Runtime • Run real-world MCPs powering AI Agents

No description yet.

Provide AI agents with full Tor network access and dark web data through a zero-config OpenClaw skill or standalone tool.

Vendor-neutral home for portable agents: skills, MCP tools, memory, canvas, and secret proxy.

The most comprehensive ServiceNow AI toolkit, including a full ServiceNow MCP server: 500+ MCP tools plus 26 AI capabilities (scan, review, build, ops, docs) and a direct BYOK mode. Works with Claude, ChatGPT, Gemini, Cursor, GitHub Copilot and any LLM.

Connects AI agents to a user's mailbox with OAuth-scoped permissions, enabling email sending, inbox management, verification-email capture for tests, and migration from Resend.

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

Gives AI coding agents on-demand security playbooks, a code scanner they can run on their own output, and live lookups against CISA KEV, NVD and OSV so they verify threats instead of guessing. Runs locally with no API keys or accounts, exposing skills, tools and a secure-build prompt to Claude Code, Codex, Cursor or any MCP client.

Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.

Enables zero-auth agent workflows for email OTP extraction, KV checkpoints, webhook bins, wake timers, and clean URL-to-Markdown reading.

Enables an AI agent to ask your phone for its current location on demand with consent, via a self-hosted relay and OAuth instead of API keys. The relay requests a fresh GPS fix and returns the answer without keeping location history.

Check any agent skill or MCP server's security verdict before your agent installs it. Sandbox-based 0-100 verdicts (Verified, Caution, Blocked). Free, read-only, no account.

Find and run AI workflows from the Edgaze marketplace in your agent. Sign in with OAuth.

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

Search a curated directory of agent tools, MCP servers, APIs, protocols and skills. No auth.

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

Official SonarQube MCP Server for code quality and security in AI agents

Enables AI agents and IDE assistants to run zero-config security audits, detect secrets and vulnerable dependencies, and apply adversarial verification to reduce false positives.

Enables AI assistants to read videos, official subtitles, comments, private messages, and live room/danmaku data, plus scan-QR login and admin-approved sending of replies, comments, and danmaku with writes disabled by default.

Enables Cursor and Codex agents to audit Agent Skill structure (frontmatter, broken links, missing files), analyze dependencies for undeclared, unused or vulnerable packages via OSV, and run 28 local bug and code-quality rules with SonarQube-style A–E ratings. It can also optionally pull issues, metrics and quality-gate status from SonarQube or SonarCloud, or scan and upload results.