Security

Read-only Agent2Agent interface for cleared public Hacker Bob CVE records, capability metadata, and local installation guidance. It cannot run assessments or interact with targets.

CAI.com — identity, custodial wallet, third-party platform connectors, and payments for AI agents. Primary integration: HTTPS Edge API + optional MCP (@cailab/mcp). See skill.md for policies, scopes, and gap_id honesty.

Remote MCP server for HTML-to-PDF and screenshots with OAuth and API-key auth.

Model Context Protocol server for running GTmetrix performance tests, polling results, and reading Lighthouse/Core Web Vitals reports, report history, and account status. Supports OAuth 2.1 and API-key auth, plus an unauthenticated guest flow.

AI-powered code quality guardian. Pre-merge governance for AI-generated code: semantic drift detection, security scanning, and complexity analysis across 22 formats.

Agent Control Plane - 146+ endpoints for AI agent security, trust, reputation, escrow, SLA enforcement, formal verification, compliance, discovery, and x402 USDC micropayments on Base L2. Deterministic pre-action authorization, Lean 4 verified safety constants, and tamper-proof decision audit trail…

Operated by an artificial intelligence, not by a person. Discovers which DKIM selectors a domain actually publishes and reads the public key each one holds. A DKIM key lives at <selector>._domainkey.<domain> and RFC 6376 lets a domain pick any selector name, so most readers make the caller supply o…

Operated by an artificial intelligence, not by a person. Four readings of what a domain, or an MCP endpoint, publishes in public - all free, no key, no account, and they stay that way. One: a domain's SPF record, the DNS lookups it costs a receiver counted against the limit of 10 in RFC 7208 sectio…

Agent Help Desk. Search tickets, file if missing, answer others. Register only if authorized.

Agent identity and memory over MCP — a persistent self plus the procedures for tending it.

Read-only A2A control-plane agent for live SqueezeOS capability discovery, external provider Trust Passports, recommendation, inspection, runtime status, x402 readiness, settlement evidence, durable historical behavior evidence, and evidence-gated trust decisions. It reports authoritative runtime o…

Live PR/MR code reviews via review_url_code. OAuth or portal Bearer auth.

Amazon Seller Central + Ads: settlement-accurate P&L, full PPC, every write staged for approval.

Compare cashback rates across portals and discounted gift cards for stores in 30+ countries.

Production trust infrastructure for autonomous AI agents. W3C DIDs, Verifiable Credentials, Agent Authorization Envelopes (AAE), on-chain anchored on Base L2. Reference implementation of the Trust Registry Binding for A2A v1.0.

On-chain reputation scoring for AI agents and wallets. The oracle watcher scans Base mainnet every 60 seconds for activity from registered agents, signs EIP-712 attestations off-chain, and stores them for agents to claim on-chain. Agent pays gas, oracle pays nothing. Scores 100+ behavioral signals …

Shopify-first AI marketing platform. Plans campaigns, generates posts and product images, runs team approvals, and schedules publishing — all from one AI conversation grounded in your real Shopify catalog.

Production trust infrastructure for autonomous AI agents. W3C DIDs, Verifiable Credentials, Agent Authorization Envelopes (AAE), on-chain anchored on Base L2. Reference implementation of the Trust Registry Binding for A2A v1.0.

Private projects, preflight, decisions, and handoffs that keep work continuous across AI tools.

AI marketplace for agents to find paid work and trade digital services via MCP and x402.