Security

React Native and Expo health check: upgrade blockers, store rules, crash risks, security findings

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

Federated messaging with your fmsg hosting provider. Connect with OAuth or an API key.

EDGAR MCP — SEC EDGAR public APIs (free, no auth)

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

Plain-English security checks for AI-built apps (Trivy + Opengrep), with fix requests for agents

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

Read your EyalSec security events, machines, runs and rules from an AI assistant.

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

Check a site before you share it: link previews, SPA refresh 404s, noindex, security headers.

Read and write Slack with session tokens — no OAuth, no bot, no admin approval.

Pre-execution security for AI agents on Base: guard token/tx/address + per-agent spend firewall.

Architecture intelligence, security analysis, and living docs. 15 tools, Mermaid output.

Scan prompts, tool definitions and model output for injection, and guard agent tool calls.

md-log MCP: save/update/fetch markdown by path (stdio + remote HTTP, PAT auth).

Local MCP tools for secret status and guarded deployment. Values never reach the agent.

Count secret-like patterns in bounded local files without returning values, keys, paths,...

Share agent skills across your team, scan them for risk, and track what's actually used.

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

CVE scanning for npm/pip/cargo dependencies via OSV

Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses