#audit

Detects hidden FX bank spreads vs mid-market rates. Score 0-10 with overpayment estimate in CAD. FINTRAC registered MSB. Rail-agnostic audit for all major banks.

QueryBear is a managed MCP server that gives AI agents like Claude, Cursor, Claude Code, and Windsurf safe, read-only access to your PostgreSQL and MySQL databases. Every query runs through a security pipeline (SQL parser, allowlisted tables, blocked columns, row limits, timeouts). Audit log on every query. Column-level access controls let you hide PII, tokens, and secrets from the agent entirely. Natural-language-to-SQL with schema context. One URL, ~60-second setup, OAuth 2.1 auth — no config files, no self-hosting.

Release gate agents call before they tell users a public website is ready to ship. Scans public websites across security, SEO, accessibility, legal compliance, and sustainability.

Independent verification for the AI agent economy. C2PA-signed reviews of AI agents with structured Laddoo Scores. 9 MCP tools: trust_check, find_similar_agents, get_scorecard, request_quick_audit, verify_claim, compare_agents, find_trusted, report_review_issue, submit_agent.

Audit-grade memory backbone for agent teams. Bi-temporal facts (event time + transaction time, with recall(as_of=...) replay), 6-step deterministic retrieval (no LLM in the critical path), conversation ingest with speaker-locked dual-pass extraction, per-tenant Postgres row-level security, and Ed25519-signed provenance. Postgres + pgvector + Neo4j defaults; ArangoDB / DynamoDB / Cosmos / AlloyDB also supported. Listed on the official MCP Registry as io.github.bolnet/attestor.

Tells you how you and your Claude agent actually work together. Reads your CLAUDE.md, hooks, skills, memory, and scheduled tasks — then writes you a letter. Three core tools: collab (collaboration scoring + lint), security (secrets scan, prompt-injection surfaces, rule conflicts), and health (orphan jobs, overlap, structural drift). Local-only — no API keys, no data leaves your machine. Source: github.com/bleedmode/dearuser

PCI DSS v4.0.1 static-analysis MCP server for Go payment service codebases. 12 scanners detect PAN/CVV exposure, weak crypto, missing audit logs, vulnerable deps, TLS misconfig, auth weaknesses, plus CycloneDX 1.6 SBOM generation. Each finding maps to the exact PCI requirement. AI-assisted triage via triage_findings tool. Keyless-signed multi-arch Docker image on ghcr.io.

pen-source MCP server that AI coding agents call as they work to log structured change events. Captures the entity (DB column, table, function, endpoint, dependency, env var), the diff, and the reasoning behind each change to a local SQLite database — preserving the intent that would otherwise evaporate when the agent session ends. Six MCP tools: log_change, diff, blame, history, changeset, and search. Answers questions like "when was users.stripe_customer_id added and why?" or "which agent added the payments table?" Zero-config (SQLite, WAL mode), Python 3.10+, MIT licensed. Like git blame, but for semantic entities and AI agents.

Cryptographic audit trail for AI agents via Model Context Protocol. Every AI decision signed Ed25519, hash-chained, tamper-proof. AISS-1.0 compliant. Post-quantum ready. Compliance-ready for SEC, FINRA, GDPR, HIPAA.

Strata is a self hosted AI memory server. Your AI remembers everything across every session, on your own hardware. Key features: . Semantic search (find memories by meaning, not keywords) . Per-agent API keys with granular permissions . 3D constellation viewer with live agent activity . File vault (attach real documents to memories) . CSV audit log (full transparency on every agent action) . Pre-Strata history import (your memory doesn't start at install day) . Global MCP kill switch (emergency brake, only a human can undo) . Automatic deduplication . 10 structured thought types . Backend using PostgreSQL . Runs on a Raspberry Pi Always on, always local, always yours.

Pre-execution enforcement and tamper-evident audit trails for AI agents. Hash-chained action logs, Ed25519 signatures, covenant policy language. EU AI Act Article 12 ready. Works with Claude Desktop, Cursor, VS Code.

MCP server for email deliverability: validate SPF/DKIM/DMARC/BIMI, check blacklists, test SMTP/IMAP, look up DNS, and generate ready-to-deploy records for any major email provider. Ships with two one-click prompts (audit-deliverability, setup-dns). Public, no auth.

Non-invasive AI Agent operation monitoring — audit every API call your agent makes to Shopify, Meta Ads, and more. Real-time alerts, audit logs, and operation history. Works with Claude Desktop, Cursor, and any MCP-compatible AI tool.

Every agent action is recorded in a SHA-256 hash chain. With this, you can actually prove to clients that your agent did what it said it did. Record, query, verify, and export agent activity.

Persistent memory for AI agents that survives across sessions. Store, recall, and semantically search memories. Includes loop detection that catches agents stuck repeating themselves, full audit trails, shared memory between agents, and a real-time dashboard. Works with Claude Code, Claude Desktop, and Cursor. Open source, free tier available.

x402 micropayment API for AI agents. Audits token smart contracts for safety. Pay per call with USDC on Base.

Context Minifier & State Guard — Local-first MCP middleware proxy that reduces token waste by 61%, prevents context rot, and adds security hardening

DSM for developers — start, stop, audit, and analyze your entire dev stack with one command. MCP server with 27 tools for Claude Desktop & Claude Code. Supports Windows, WSL, macOS, Linux, and Docker. Built in Rust.

The guardian layer for AI agents. Scoped sessions with spend limits (Gate), AES-encrypted secrets (Vault), immutable audit trail with anomaly detection (Watch), and proxy mode that intercepts every MCP tool call for policy enforcement. Human-in-the-loop approvals, webhooks, 10 MCP tools, REST API. Works with Claude, Cursor, Windsurf, and any MCP client.

Open-source security audit framework covering all 10 OWASP Agentic AI threat categories (ASI01-ASI10). Scan multi-agent systems for prompt injection, data exfiltration, broken access control, and 7 more categories. Returns risk scores (0-100) with remediation priorities. Free tier: 10 audits/day. Proven on a 94-agent production fleet. Complements Microsoft Agent Governance Toolkit.

Cryptographic accountability for AI agents. Ed25519-signed receipts for every MCP tool call — constraints, chains, AI judgment, invoicing, local dashboard.

Security MCP server with 300+ rules for AI-generated code. Scans Next.js, Supabase, Clerk, Stripe, Prisma, Hono, GraphQL, and 20+ modules. Zero config, runs locally.

Cryptographic identity, policy enforcement, trust scoring, and tamper-proof audit trails for AI agents. Register agents, track signed events, check policies, and get trust profiles — all from Claude, Cursor, or Windsurf. OWASP Agentic Top 10 compliant.

Free SEO audit MCP server. Analyze meta tags, headings, broken links, robots.txt, and competitor pages — directly from Claude, Cursor, or Windsurf. No API key needed.

Free SEO audit MCP server. Analyze meta tags, headings, broken links, robots.txt, and competitor pages directly from Claude, Cursor, or Windsurf. No API key needed.

Scan any website for SEO issues from Claude. Returns structured issues with fix prompts you can apply immediately. Checks SEO, performance, accessibility, and AI search visibility (AEO). One command to set up, works in Claude Code and any MCP client.

MCP server security scanner that detects vulnerability patterns in MCP server configurations and outputs SARIF reports. Scans for prompt injection risks, tool poisoning, excessive permissions, and other security issues in Model Context Protocol servers.

PageSpeed, WHOIS, DNS, SSL checks, and site health analysis for AI agents. 6 tools, free, no API key.

Persistent memory, knowledge graph, governed actions, and runtime orchestration for AI agents. 107 tools. Works locally with zero-config SQLite(no API key needed) or connects to Novyx Cloud for the full surface. Install: uvx novyx-mcp

35+ behavioral science tools for commerce intelligence — persona identification, preference elicitation, nudge design, journey friction audits, and more. Built for AI agents via MCP protocol.

EU AI Act compliance scanning for Python AI agents. 10 tools that scan, analyze, and fix compliance gaps across LangChain, CrewAI, AutoGen, OpenAI, and RAG pipelines. Checks 6 EU AI Act articles with HMAC-SHA256 tamper-evident audit trails. pip install air-blackbox-mcp. August 2026 deadline ready.

High-intensity Generative Engine Optimization (GEO) auditing for AI agents. This tool allows agents to measure brand visibility and citation strength in LLM search results. It features a native 402 Payment Required handshake for $1.50 micro-payments per audit.

Open-source MCP proxy for AI agent access control. Intercepts every tool call with CEL policies, RBAC, full audit trail, content scanning, and Admin UI. Single binary, zero dependencies.

Persistent memory for AI agents. 72 MCP tools for remember, recall, rollback, audit, knowledge graph, context spaces, eval, cortex, replay, governed actions, and more. Pairs with CLAUDE.md to give Claude Code shared memory across sessions and agents. Works locally with zero config (SQLite) or connects to Novyx Cloud for teams.

Tamper-proof audit trail for AI decisions. Record, verify, and export cryptographic proof chains via MCP. 6 tools: proof_record, proof_verify, proof_chain_verify, proof_get, proof_export_jsonld, proof_public_verify.

Tamper-evident cryptographic audit trail for LLM outputs. Compliance logging for AI agent decisions. Tools: dcl_commit, dcl_verify, dcl_get_chain, dcl_report. Requires API key from fronesislabs.com

Secrets vault for Claude Code. Encrypt API keys, tokens and passwords with AES-256. Full audit logs, MCP access rules, and zero-knowledge mode. Secrets never appear in chat.

SEOMCP is an AI-native SEO service that exposes professional SEO tools via the Model Context Protocol (MCP). It enables AI assistants like Claude to perform keyword research, rank tracking, site audits, backlink analysis, and full autonomous SEO workflows through structured tool calls. Built for SEO professionals, developers, startups, and agencies who want to supercharge their AI agents with real SEO capabilities.

Enterprise CRM with native MCP interface. Search contacts, manage deals, create tasks, and log activities across Sales, Marketing, Service, Content & Operations — with built-in approval safeguards for high-value actions.

Governance middleware for AI agents: deterministic policy enforcement, cryptographic audit trails with digital signatures, DLP/PII detection, Trust Score per agent (0-100), EU AI Act compliance (Art. 9, 11, 12, 14), Agent BOM generation, and Circuit Breaker. Native support for LangGraph, CrewAI, and AutoGen.

Governance and audit layer for MCP tool calls. TrustLoop intercepts every AI agent action, logs it to a tamper-evident audit trail, blocks unsafe tools via kill-switch, and anchors proof to the blockchain. Drop it into any MCP setup in minutes, no code changes required.

MCP server for https://oathe.ai security audits. Runtime behavioral analysis and security scanner for AI systems. Check trust scores before installing MCP servers, plugins, or AI agent skills.

Compliance evidence infrastructure for regulated tokenized markets. 27 MCP tools with ES256K-signed responses covering MiCA preflight (PASS/WARN/BLOCK), peg monitoring, reserve quality, custody risk, evidence grading (A-F across 61 RWA protocols + 105+ stablecoins), KYA agent identity, tamper-proof audit trail, macro risk (86 FRED + 20 ECB indicators), and signed PDF reports with XRPL blockchain anchoring. Part of a 3-server ecosystem: Compliance MCP (27 tools), Macro Intelligence (13 tools), Stablecoin Risk MCP (13 tools) — 53 tools total. New in v4.2: Know Your Agent (KYA) identity + trust scoring, tamper-proof SHA256 chain-linked audit trail, Evidence Lifecycle (6 states), OAuth 2.0 with Dynamic Client Registration, Enterprise Trust Layer (14 components), Unit-Based Billing, Trust Policy v1.0, 8 reference workflows. OAuth 2.0 + StreamableHTTP + SSE. Free tier: 300 units/day, no API key required. MiCA enforcement July 2026. Connect: claude mcp add --transport http feedoracle https://feedoracle.io/mcp/ Trust proof: https://feedoracle.io/trust Docs: https://feedoracle.io/docs.html

Preloop is the MCP Governance Layer. Add approval gates to AI tool calls. Intercept risky actions, collect human decisions, and keep an audit trail.

SIGMAEO is a comprehensive SEO intelligence MCP server that provides 52 powerful tools for AI assistants like Claude and ChatGPT. Domain Intelligence: Analyze any website's traffic, authority metrics, keyword rankings, backlink profile, and identify top competitors. Keyword Research: Discover keyword opportunities with search volume, difficulty scores, CPC data, and topical clustering. Find content gaps between you and competitors. SERP Analysis: Get complete search results breakdowns including featured snippets, People Also Ask questions, and ranking factors for any keyword. Page Audits: Run comprehensive on-page SEO audits covering meta tags, headings, readability, E-E-A-T signals, and technical issues. Technical SEO: Check Core Web Vitals, crawl errors, internal linking structure, and site-wide technical health. Competitor Analysis: Compare multiple domains side-by-side, track ranking changes, and uncover competitor content strategies. AI Citation Tracking: Monitor your brand's presence in Google AI Overviews and responses from ChatGPT, Claude, Gemini, and Perplexity. Secure OAuth 2.0 authentication. Real-time data. Multi-region support for US, UK, AU, and more.

Access your team's 2FA codes from AI agents without sharing secrets. List accounts, generate TOTP codes, and maintain full audit trails. Built for DevOps, CI/CD pipelines, and automated workflows that need to authenticate to protected services.

The Behavioural Prediction MCP Server provides AI-powered tools to analyze wallet behaviour prediction,fraud detection and rug pull prediction.

Conversational cloud security compliance auditing. MCP server enabling natural language queries about AWS security posture via Claude and other AI assistants.

MCP server that enables AI agents to perform comprehensive web audits using Google Lighthouse with 13+ tools for performance, accessibility, SEO, and security analysis.

The npm-package-mcp-server allows users to efficiently access and analyze source code from any NPM package. With features like smart file discovery and selective code reading, it streamlines the process for developers. 🐙🌐

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.