Agent Tools

Agents that publish an A2A /.well-known/agent-card.json — 5745 discovered and health-probed.

Add your agent

Discovered from public A2A sources — awesome-a2a lists, agent directories and self-published /.well-known/agent-card.json cards — plus our own crawling. Every agent is de-duplicated and liveness-probed (card + endpoint reachability) before listing — yielding 5745 indexed agents, 4819 currently healthy.

Agents indexed
5745 agents
4949 domains
public agent cards · +537 this week
Healthy
4819 agents
4257 domains
card reachable < 6 h
Conformant
4006 agents
3540 domains
valid card + skills
x402-capable
455 agents
453 domains
accepts x402 payment

Top rated

by quality score · health · trust signals
# Tool Grade Score
1 Afterwren by CyberMax
Paid API keys from $19/month (Builder: 25,000 calls a month); free tier 100 calls a day per IP with no key. Buy: https://afterwren.cybermaxtools.com/buy/builder?s=lead · all plans: https://afterwren.cybermaxtools.com/docs#pricing. Drop-in replacements for retired developer APIs: Clearbit Autocomplete (same [{name, domain, logo}] shape), Clearbit Logo, a public-data company profile from a domain, forward and reverse geocoding (US Census with county/tract/block FIPS, OpenStreetMap worldwide), Goodreads-style book search (Open Library) and Wikipedia search. REST + remote MCP server.
 A 10.00
2 Shiftmoor by CyberMax
Website change monitor API: watch public web pages (competitors, suppliers, policies, job and tender pages) and get every change, lines added and removed or a keyword appearing, by webhook and RSS/JSON feed. Free for 3 pages; Starter $4.99/month for 25.
 A 10.00
3 Pricewick by CyberMax
Competitor price and stock monitor API: track product pages on shops that publish their price in structured data (schema.org, Open Graph or microdata) and get every price and stock change by webhook and RSS/JSON feed. Free for 5 products; Seller $9.99/month for 50.
 A 10.00
4 Citewren by CyberMax
AI search readiness check API: scores a website on what AI crawlers and answer engines need (AI crawler rules in robots.txt, llms.txt, schema.org JSON-LD, sitemap, Open Graph, basics) and lists the issues. Free: 3 checks a day; a Pro key adds fixes, a 15-page crawl, a ready llms.txt draft and weekly monitoring.
 A 10.00
5 Awardtide Recompete Radar by CyberMax
Federal contract recompete radar API: US government contracts (USAspending.gov, $1M+) that end within 12 months, filtered by NAICS code, agency, state, value and set-aside. Free: count + first 10 matches per filter; a Radar Pro key returns every row, saved filters and weekly RSS/JSON/CSV alert feeds.
 A 10.00
6 Apuchat
Walkie-talkie hub for AI agents. Lets two or more agents on different machines talk to each other in real time over a hosted MCP / REST / A2A server. Open channels by callsign or by index, broadcast, request rooms, offline DM delivery.
 A 10.00
7 Tasklix
The shared task board your autonomous agent fleet can read and write. Agents register, create and claim tasks from a shared queue, hand off work to siblings, and pause for human approval before consequential actions.
 A 10.00
8 BlockRun
BlockRun is the routing and payment layer for AI. One OpenAI-compatible endpoint routes to 88 LLMs plus image, video, music and speech generation, web search, prediction-market and on-chain data, and multi-chain RPC. Every paid call is billed per request in USDC over x402 on Solana (Solana) — no API keys, no accounts, no subscriptions; read the price off the 402 and retry with a signed X-PAYMENT header. Open-weight chat models are free and need no wallet.
 A 10.00
9 Helius for Agents
Helius is the Solana toolkit for AI agents. It provides an MCP server with 60+ Solana operations, a CLI with 95+ commands, a Claude Code plugin, TypeScript/Rust SDKs, and Skills for building on Solana. Agents can read accounts, parse and send transactions, manage tokens and NFTs, stream real-time blockchain data, configure webhooks, and programmatically obtain Helius API keys via an on-chain USDC payment on Solana mainnet.
 A 10.00
10 FXMacroData
Macroeconomic and FX data agent. Provides central-bank indicator time series, FX spot rates, CFTC COT positioning, commodity prices, release calendars, and live FX market session data. USD announcement indicators are public; non-USD announcements, COT, and commodities require an API key.
 A 10.00

All A2A agents

Crawled from awesome-a2a directories · refreshed daily.

/api/v1/a2a/stats

Access model — Open: callable with no credentials · Human key: a person must provision an API key/OAuth first · Agent-pays: agent settles each call on-chain (x402)

“ContrastAPI” is shared by 5 different URLs

All exact-name matches are shown; ranked results follow.
  • ContrastAPI https://api.contrastcyber.com
    a2a mcp ok

    MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

    mcp listing a2a listing
  • ContrastAPI https://api.contrastcyber.com/mcp
    mcp ok

    MCP server with 53 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

  • ContrastAPI https://contrastapi--contrastcyber.run.tools
    mcp ok

    uptime_30d 1.0%; p95 595.3ms; conformance: fail

  • ContrastAPI https://contrastcyber.com
    a2a ok

    Landing pointer card for ContrastAPI, the live product of ContrastCyber (an umbrella building products humans and AI agents use the same way — see provider). ContrastAPI is a Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts (incl. conditional triage) for AI agents: full-site security scan with A-F grading (contrast_scan), CVE/KEV/CWE lookup, composite risk scoring (CVSS+EPSS+KEV+PoC fusion), CVSS v3.x vector parser, domain audit, SSL/header scan, IOC/phishing/IP/ASN/WHOIS/subdomain/wayback, password breach, username enumeration, threat intel, MITRE ATLAS (AI/ML attack catalog) with bulk technique drill, MITRE D3FEND (defense techniques mapped to ATT&CK), SigmaHQ detection rules (UUID lookup + bulk), email security posture (SPF/DMARC/DKIM), web intelligence (robots.txt parser, redirect-chain walker, email validation, brand-asset scraper, SEO audit, GEO/AI-visibility audit). All execution interfaces are served by api.contrastcyber.com; the full agent card with the complete skill list is at https://api.contrastcyber.com/.well-known/agent-card.json

  • ContrastAPI https://server.smithery.ai/contrastcyber/contrastapi/mcp
    mcp ok

    MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

“Cybersecurity Threat Intelligence MCP” is shared by 2 different URLs

All exact-name matches are shown; ranked results follow.

“VulnFeed” is shared by 3 different URLs

All exact-name matches are shown; ranked results follow.
  • VulnFeed https://vulnfeed-api.novadyne.ai
    a2a down

    Dependency vulnerability scanner with EPSS scoring. Scans lockfiles (npm, pip, go, cargo, maven, nuget, pub, composer, mix), prioritizes by real-world exploit probability, recommends exact fix versions. 9 MCP tools. Free tier: 10 scans/day. Paid: $14/mo or x402 micropayments (USDC on Base).

  • VulnFeed https://vulnfeed-api.novadyne.ai/vulnscan/query
    x402 down

    Dependency vulnerability scanner with EPSS scoring. Scans lockfiles (npm, pip, go, cargo, maven, nuget, pub, composer, mix), prioritizes by real-world exploit probability, recommends exact fix versions. 9 MCP tools. Free tier: 10 scans/day. Paid: $14/mo or x402 micropayments (USDC on Base).

  • VulnFeed https://vulnfeed.novadyne.ai
    x402 down

    Pay-per-call CVE and EPSS vulnerability intelligence for AI agents. Keyless CVE/GHSA lookup backed by NVD + GitHub Advisories, with EPSS exploit-probability prioritization and fix-version recommendations. $0.002 USDC per call on Base. MCP server on PyPI (`vulnfeed-mcp`) scans dependency lockfiles across 6 ecosystems. ([GitHub](https://github.com/novadyne-hq/vulnfeed-mcp)) ([Discovery](https://agent-worker.infai-tech-corporation.workers.dev/.well-known/x402))

“x402 web tools” is shared by 8 different URLs

All exact-name matches are shown; ranked results follow.
  • Kevscope by CyberMax
    CyberMax
     ● healthy

    Paid API keys from $19/month (Analyst: 10,000 calls a month); free tier 200 calls a day per IP with no key. Buy: https://kevscope-api.cybermaxtools.com/buy/analyst?s=lead · all plans: https://kevscope-api.cybermaxtools.com/docs#pricing. CVE priority API: for up to 20 CVEs per call, returns CISA KEV status (date added, federal due date, ransomware use), FIRST EPSS probability and percentile, CVSS from the CNA or CISA-ADP, CISA SSVC exploitation/automatable/impact and a public-rules verdict (act_now, high, medium, low) with reasons. Also recent KEV additions and a pre-KEV EPSS watchlist. REST + MCP server.

    B+9.8 🔑 human key JSONRPC 3 skills
  • Depmoor by CyberMax
    CyberMax
     ● healthy

    Dependency vulnerability scanner API: send a lockfile or package list, get findings ranked by real-world risk (OSV advisories, CISA Known Exploited Vulnerabilities, FIRST EPSS) as JSON, SARIF, CSV or Markdown for CI. Also a free CORS-enabled CISA KEV catalogue endpoint.

    B+9.7 🔑 human key HTTP+JSON 2 skills
  • Deltawren by CyberMax
    CyberMax
     ● healthy

    Paid API keys from $19/month (Open Domain Ranks feed: 20,000 file requests a month); free tier 200 file requests a day per IP with no key. Buy: https://deltawren.cybermaxtools.com/buy/domain-ranks-monthly?s=lead · all plans: https://deltawren.cybermaxtools.com/docs#pricing. Daily data feeds as files: the same layout and schema as the free CyberMax Hugging Face datasets (CISA KEV + EPSS + CVSS, SEC Form 4 insider transactions, SEC 10-K/10-Q sections, open domain ranks), refreshed every day, plus daily history snapshots and per-file diffs (rows added, removed and changed). Key-based access over HTTPS, Range requests, a JSON manifest with sha256 per file. Free: the feed list, manifests and the daily change counts.

    B9.4 🔑 human key JSONRPC 2 skills
  • Ops Control HQ Utility Agent
    Ops Control HQ
     ● healthy

    Agent utility gateway with a free read-only Panta SignalDeck market-intelligence feed plus machine-payable x402 tools for npm package health and vulnerability intelligence, technical SEO audits, DNS and batch DMARC lookup, direct SEC EDGAR filings, public-page extraction and bulk HTTP status/redirect checks, security headers, AI crawler and robots checks, domain RDAP registration lookups, foreign-exchange rates, crypto spot prices, Base ERC-20 token risk signals and SEC company research. Paid execution settles in Base USDC.

    B+9.7 🔓 open 20 skills
  • Grey Ridge Signals — x402 Data & Security API
    Grey Ridge Signals Group LLC
     ● healthy

    Agent-native, pay-per-call data on Base mainnet (USDC via x402). No account, no API key — agents pay inline in USDC. Every endpoint returns HTTP 402 with a payment-required challenge (x402 v2, network eip155:8453 / Base, asset USDC) until a valid signed payment is provided. See /.well-known/x402 for the full machine-readable payment manifest and /mcp for MCP protocol access. Provider: Grey Ridge Signals Group LLC.

    B9.6 🔓 open 8 skills
  • ContrastAPI
    ContrastCyber
     ● healthy

    Landing pointer card for ContrastAPI, the live product of ContrastCyber (an umbrella building products humans and AI agents use the same way — see provider). ContrastAPI is a Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts (incl. conditional triage) for AI agents: full-site security scan with A-F grading (contrast_scan), CVE/KEV/CWE lookup, composite risk scoring (CVSS+EPSS+KEV+PoC fusion), CVSS v3.x vector parser, domain audit, SSL/header scan, IOC/phishing/IP/ASN/WHOIS/subdomain/wayback, password breach, username enumeration, threat intel, MITRE ATLAS (AI/ML attack catalog) with bulk technique drill, MITRE D3FEND (defense techniques mapped to ATT&CK), SigmaHQ detection rules (UUID lookup + bulk), email security posture (SPF/DMARC/DKIM), web intelligence (robots.txt parser, redirect-chain walker, email validation, brand-asset scraper, SEO audit, GEO/AI-visibility audit). All execution interfaces are served by api.contrastcyber.com; the full agent card with the complete skill list is at https://api.contrastcyber.com/.well-known/agent-card.json

    B9.4 🔑 human key 8 skills
  • x402 web tools
    x402 web tools
     ● healthy

    Pay-per-call web and on-chain data tools for AI agents, settled in USDC on Base via the x402 protocol. No account, no API key — an unpaid request returns an HTTP 402 quote; pay with an X-PAYMENT header and the call is served.

    C8.0 🔓 open HTTP+JSON 362 skills
  • x402 web tools
    x402 web tools
     ● healthy

    Pay-per-call web and on-chain data tools for AI agents, settled in USDC on Base via the x402 protocol. No account, no API key — an unpaid request returns an HTTP 402 quote; pay with an X-PAYMENT header and the call is served.

    C8.2 🔓 open HTTP+JSON 362 skills
  • Waltsoft ThreatPulse
    Waltsoft
     ● healthy

    CVE exploit intelligence agent. Tells you whether a vulnerability is exploited and how urgently to patch it: CVSS, FIRST EPSS, CISA KEV, Metasploit / ExploitDB / GitHub proof-of-concept exploits, patches and a 0-100 urgency score per CVE; also scans package lists and SBOMs and ranks CVEs for your stack.

    B9.4 🔓 open JSONRPC 4 skills
  • ContrastAPI
    ● healthy

    Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts for AI agents: CVE/KEV/CWE lookup, composite risk scoring (CVSS+EPSS+KEV+PoC fusion), CVSS v3.x vector parser, domain audit, SSL/header scan, IOC/phishing/IP/ASN/WHOIS/subdomain/wayback, p…

    C7.9 🔓 open
  • VulnFeed
    Novadyne
     ● down

    Dependency vulnerability scanner with EPSS scoring. Scans lockfiles (npm, pip, go, cargo, maven, nuget, pub, composer, mix), prioritizes by real-world exploit probability, recommends exact fix versions. 9 MCP tools. Free tier: 10 scans/day. Paid: $14/mo or x402 micropayments (USDC on Base).

    E1.9 ⚡ agent-pays · x402 9 skills
  • Cybersecurity Threat Intelligence MCP
    FoundryNet
     ● down

    Search CVEs with EPSS exploit-prediction and CISA KEV status, check IP/domain reputation, and run vulnerability scans — threat intel from NVD, CISA, EPSS, GHSA, AbuseIPDB, and OTX.

    E0.9 🔓 open