AI security tools with a public OpenAPI spec
The INITE Atlas lists 62. By use, the list opens with Cloudflare, Deep Search, Palisade, AI Security Guard and LayerCall.
An OpenAPI document we fetched and parsed, with the number of endpoints it describes and the address it lives at.
Where each one says so
Ranked by use
Figure and bar: visits/mo, estimate · year: online since
- #1

CloudflareMCP · open
Proxies website traffic through a global network for CDN caching, DNS, DDoS protection and a web firewall, plus Workers serverless code and zero-trust access.
4.9MActiveFrom $20/mo2009 - #37

Deep SearchMCP · open
Searches public sources to find and verify people by name, phone, email, or photo with source links.
11.1kActiveFree plan - #57

PalisadeMCP · sign-in
Reads DMARC aggregate reports, flags SPF and DKIM failures per sender, and writes approved DNS record fixes into your zone.
3.4kActiveFrom $19/mo - #91

AI Security Guard
Detects malicious packages, scans prompts for injection attacks, and monitors agent runtime security.
675MaintainedFree2025 - #105

LayerCallMCP · open
API that scores signups, IPs, emails, phones, domains and devices for fraud risk in a single call.
436ActiveFrom $49/mo - #107

YesTechieMCP · open
Installs and manages Ubiquiti UniFi networks, security cameras and access control systems for commercial and industrial sites.
432Active2022 - #121

RfpMCP · sign-in
Drafts answers to RFPs and security questionnaires from uploaded documents, with source citations and confidence scores for reviewer sign-off.
285ActiveFrom ≈ $55/mo - #138

HedgeMCP · sign-in
Places hard-to-insure commercial risks with specialty carriers, tracking each submission in one shared file for brokers.
145Active2026 - #141

ISMS DirectoryMCP · open
Lists verified ISO 27001 and SOC 2 compliance consultants and auditors, searchable by a query interface or through an API.
138Active - #151

CobytesMCP · open
Scans a domain's DNS, email authentication and web security records, reporting failing checks with readable fix guidance.
97ActiveFree2024 - #153

Injection Molding Cost CheckerMCP · open
Estimates the cost of a custom part and compares injection molding and machining quotes from manufacturers.
88Active - #174

EOR CompassMCP · open
Compares employer-of-record vendors' verified published prices and builds per-country shortlists of providers from them.
52Active - #183

Royal PluginsMCP · sign-in
WordPress plugins for security, performance, backups, SEO, forms, and affiliate tracking.
40ActiveFrom $49/yr - #190

AuditBadger
Guides small teams through SOC 2 and ISO 27001 compliance by organizing requirements into tasks and collecting evidence from connected tools.
37ActiveFrom $250/mo2024 - #193

ZeroLeaks
Automatically red teams AI agents and prompts to find prompt injection, tool hijacking, and data leakage vulnerabilities.
34ActiveFrom $79/mo - #209

ZeroGEXMCP · open
Models live gamma exposure by strike on SPY, SPX, QQQ and NDX, marking call walls, put walls and the gamma flip.
22ActiveFrom $39/mo - #216

CommentKeyword
Detects keywords in Instagram comments, replies publicly, sends personalized DMs, and optionally continues conversations with AI.
19From $12/mo - #217

unflagdomainMCP · open
Sends blocklist removal requests and tailored emails to security vendors that flag a domain, tracking dispatches in a live dashboard.
19ActiveFrom ≈ $55 once2025 - #221

Free AI URL ScannerMCP · open
Scans pasted URLs for malware and phishing, with an AI analyst returning a plain-language verdict.
18Active2025 - #230

OVOSeo
Audits sites, tracks rankings and turns Search Console data into a prioritized list of SEO fixes.
13ActiveFrom ≈ $11/mo - #231

DeepXL.ai
Detects manipulated documents, fake IDs, and fraudulent images using forensic analysis.
13Active2023 - #273

EoslMCP · open
Looks up vendor end-of-support and end-of-sale dates for networking and security hardware part numbers, sourced from manufacturer notices.
7ActiveFrom $12/mo - #274

HardenvoMCP · open
Generates a small organization's written security policies, plans and review dates from its own figures, with free checklist tools.
7ActiveFrom $29/mo2026 - #279

Callable
Sends a human to verify account access and identity for AI agents, returning structured results with screenshots.
6 - #288

CyphrexMCP · open
Enforces agent behavior policies, blocks unsafe actions, and produces cryptographically signed audit trails for regulatory compliance.
5ActiveFrom $42,000/yr - #289

AttestvioMCP · open
Free calculator sheets that size compliance evidence, audit and incident workloads, plus a paid record keeper for obligations and attestations.
5ActiveFrom $29/mo2026 - #306

AiVIS Cite Ledger
Audits websites for AI citation readiness and generates evidence-backed improvement recommendations.
3ActiveFrom $15/mo2026 - #310

CVE SecurityMCP · open
Tracks CVE exploitation evidence, detection signals and vendor fixes, flagging which vulnerabilities are exploited and detectable.
3Active - #318

YungleMCP · sign-in
Encrypts each file with its own key and hands out download links, client collections, vaults and upload requests for large file transfers.
2ActiveFrom ≈ $5.62/mo - #358

VeilScan
Maps a company's external attack surface, chains exposed flaws into step-by-step breach paths, and reports proof for each finding.
1ActiveFrom $49/mo2024 - #364

CapanixMCP · open
Sizes an audit into requirements, evidence items and owner hours, then files findings and corrective actions against each requirement.
1ActiveFrom $29/mo2026 - #368

By Faro
Audits websites for AI agent readiness across content discovery, pricing transparency, and structured data.
1ActiveFrom $4.50/mo - #369

NoForm
Lets AI agents sign up real, email-verified users into your app by hosting three static protocol files.
1From $29/mo - #379

AgentSurge
Audits websites for AI agent readiness and identifies technical fixes to improve visibility to ChatGPT, Claude, and Gemini.
1MaintainedFrom $39/mo - #391

PhronesisMCP · sign-in
Issues auditable action boundaries and decision receipts that an agent calls before committing to a decision, scored later against outcomes.
1MaintainedFrom $49/mo - #396
ShopSafe, is this shop safe?MCP · sign-in
Checks an online shop's domain history, ownership and threat reports before you buy, and monitors for lookalike brand clones.
1 - #426

TanodMCP · open
Serves security scans, web and PDF utilities and on-chain reads as pay-per-call tools over MCP for AI agents.
493 installs/moActiveFrom $0.00 per use - #439

Ai-Signed
Runs 43 automated checks to verify website trust signals for search engines and AI chatbots.
45 linking domainsActiveFrom $5.99/mo - #440

Dominion ObservatoryMCP · open
Monitors MCP servers for security drift and behavioral anomalies, providing continuous trust scores and signed audit attestations.
51 linking domainsActiveFrom $49/mo - #479

Audix GRC
Pulls read-only evidence from cloud, identity and code systems to map controls across SOC 2, ISO 27001 and HIPAA.
30 linking domainsActiveContact sales - #484

AgentShield
Detects prompt injection, jailbreak, and data exfiltration attacks on LLM requests in real time.
29 linking domainsActiveFrom $29/mo - #498

The ColonyMCP · open
Hosts threaded forums, direct messages and a portable OpenID Connect identity for AI agents and the humans who work with them.
109 installs/moActive2026 - #544

Sentinel SCA
Checks identity, authority, and policy before autonomous agents execute consequential actions.
EmergingActiveFrom $199/mo - #557

MapleFlow
Unified API providing access to 34 AI models, identity verification, and utility tools under one credit balance.
EmergingFrom $10/mo - #573

PreRiskAI
Completes guided security readiness assessments and generates maturity scores with control gap mapping.
Emerging - #579

zn
Blocks prompt injection attacks on AI agents with deterministic rules running locally in 0.1ms.
EmergingActiveOpen source - #581

ShieldPilot
Scans AI agents for injection attacks, supply chain vulnerabilities, and policy violations before deployment.
1 installs/moMaintainedOpen source - #603

GridZenMCP · open
Routes verification requests to authorized identity and phone providers and returns allow, review or decline decisions with reason codes.
Little sign of use
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.