An open source plugin for enabeling claude to gain offensive pentesting capabilities

Enables AI agents and IDE assistants to run zero-config security audits, detect secrets and vulnerable dependencies, and apply adversarial verification to reduce false positives.

Enables AI assistants to read videos, official subtitles, comments, private messages, and live room/danmaku data, plus scan-QR login and admin-approved sending of replies, comments, and danmaku with writes disabled by default.

Exposes JSON-RPC 2.0 tools that let AI agents scan Base L2 lending positions approaching liquidation, simulate flash-loan-backed debt rescue plans, and generate the calldata needed to repay Morpho Blue and Aave v3 debt while avoiding the 5% penalty. Agents and builders can also attach a referral wallet to collect an instant 0.05% USDC revenue share paid atomically in the same block.

Deploy AI-built sites and apps to EU hosting from your AI agent. OAuth sign-in, 14-day free trial.

Enables agents to scan course structures, play videos at real 1x speed, track document task completion, capture quiz screenshots for vision-model reading, select and submit answers, and verify scores through MCP tools.

Turns any OpenAPI 3.x spec into an MCP server that exposes one validated tool per API operation, so AI agents can discover and call a REST API over stdio or Streamable HTTP. It is read-only by default, with allow/deny lists, environment-based auth, timeouts and response truncation for safe agent access.

Provides OAuth-secured MCP tools for working with private, Git-backed Markdown knowledge bases: searching pages, reading content, ingesting new source documents, retrieving cited original files, and reviewing history or rolling back accepted pages. Every tool call is checked against each person's or agent's current wiki grant and returns source paths and Git revisions for traceability.

Enables AI agents to connect to security cameras, detect objects with YOLOv8, recognize known faces, monitor restricted intrusion zones, capture annotated snapshots, and query a persistent SQLite event history.

A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

MCP configuration to connect AI agent to a Linux machine.

MCPCAN is a centralized management platform for MCP services. It deploys each MCP service using a container deployment method. The platform supports container monitoring and MCP service token verification, solving security risks and enabling rapid deployment of MCP services. It uses SSE, STDIO, and STREAMABLEHTTP access protocols to deploy MCP。

Swiss Ephemeris 7-Wisdoms & 4-Elements deterministic oracle (<1.5ms, Zero-Auth, Rule 14).

Agent document workspace with wallet auth. Create, update and share markdown docs. By AutEng.ai

Australian NEM battery (BESS) data for AI agents: revenue, dispatch, FCAS, events. Free, no auth.

Public URLs for AI agents to catch webhooks, OAuth redirects, job callbacks and approval clicks.

Test your AI agents for security and safety weaknesses, and re-verify the fixes.

Find and run AI workflows from the Edgaze marketplace in your agent. Sign in with OAuth.

Scan a web page the way an AI agent reads it, get the failing checks and fixes, then re-scan.

Scan any public website and see how ready it is for AI agents and AI search, explained plainly.

Beta: read your BetterQR dynamic QR codes and per-placement scan analytics from AI agents.

Ask about your website traffic, funnels, SEO and AI agent costs. Sign in with OAuth, no key paste.

When the user wants to plan, build, or optimize SMS, MMS, or WhatsApp marketing — including welcome flows, abandoned cart texts, post-purchase, win-back, promotional sends, or transactional/auth SMS. Also use when the user mentions "SMS marketing," "text message campaigns," "SMS sequence," "SMS auto

Enables AI assistants to answer natural-language questions about environmental monitoring stations, returning real-time readings, hourly time-series, and combined station overviews. Supports per-user account binding and OAuth 2.1 authorization so each user only sees stations within their own permissions.