APPS · SECURITY AND IDENTITY

Security and identity apps for AI agents.

Password managers, identity providers and security tools. Agents look things up with read-only access, and privileged changes stay behind approval.

35 apps · MCP + REST · Every action graded read, write or destructive
01 · SECURITY AND IDENTITY

35 security and identity apps.

1Password6 actions1Password is a password manager and secure vault for storing credentials, notes and shared secrets. Individuals and teams use it to keep logins organized and access controlled.AbuseIPDB6 actionsAbuseIPDB is a shared database for reporting and checking IP addresses tied to malicious activity. Security teams use it to screen traffic and flag abusive sources.Anonyflow5 actionsAnonyFlow anonymizes and de-anonymizes sensitive data using encryption, helping teams meet GDPR, CCPA, and HIPAA requirements while still being able to share or process the underlying data later.Dnsfilter170 actionsDNSFilter is cloud-based DNS security software that blocks malicious sites and filters content across an organization's networks, used by IT teams protecting employees and managed customers.Borneo153 actionsBorneo is a data privacy platform that security teams use to scan cloud resources for sensitive data and manage the processing activities and DPIAs tied to it.Digicert101 actionsDigiCert issues and manages TLS/SSL certificates, PKI, and digital signing services that secure websites, devices, and software, used by IT and security teams protecting company infrastructure.Paradym69 actionsParadym is an API-first platform for issuing, verifying, and managing verifiable digital credentials across open standards. Identity and compliance teams use it to run credential programs.Persona69 actionsPersona provides identity verification infrastructure for building automated KYC and fraud-prevention checks. Trust and safety teams use it to verify user identities before granting access.Nextdns68 actionsNextDNS is a DNS-based security and privacy service that blocks malicious sites, trackers, and ads before they reach a device.Control D54 actionsControl D is a DNS filtering platform that lets a business manage internet access policies and monitor traffic across devices and networks.urlscan.io51 actionsurlscan.io scans and analyzes websites for threat intelligence, used by security teams investigating suspicious URLs and tracking phishing infrastructure.Cloudflare Api Key25 actionsCloudflare's API key access covers the same DNS, firewall, and zone management as its OAuth integration, for setups that authenticate with a key instead.Conveyor25 actionsConveyor automates security reviews and vendor questionnaires, using a Trust Center and AI to speed up compliance work between companies.Rkvst24 actionsDataTrails (formerly RKVST) is an evidence management platform that logs a verifiable chain of custody for supply chain and compliance data.Stytch21 actionsStytch is an authentication and identity platform; through Arc0 an agent manages Stytch project settings, redirect URLs, SDK configuration, and email templates.Cloudflare20 actionsCloudflare secures and speeds up websites and applications through a global network, handling DNS, firewall rules, and traffic routing for a domain.Virustotal16 actionsVirusTotal scans files, URLs, and domains against many antivirus engines, used by security teams checking whether something is malicious before acting on it.Dock Certs15 actionsDock Certs lets organizations issue, manage, and verify digital credentials and decentralized identities, so a credential can be checked instantly without contacting the issuer.Truvera15 actionsTruvera issues and verifies digital credentials and identities, used by organizations that need to prove a claim, like a certification, is genuine and hasn't been tampered with.Google Admin14 actionsGoogle Admin is the console for managing Google Workspace users, groups, and organizational units. IT teams use it to provision and control company accounts.Securitytrails12 actionsSecurityTrails provides domain, IP, DNS, and WHOIS intelligence, including historical records, used by security teams for threat hunting and brand protection.Identitycheck11 actionsIdentityCheck verifies user identities using algorithms and data sources to reduce fraud and confirm accurate onboarding. Security and IT teams use it as one signal among several in a broader risk review.Didit10 actionsDidit provides identity verification and compliance APIs, covering KYC, KYB, and anti-money-laundering checks for onboarding and ongoing risk reviews, used by fintechs and marketplaces vetting new customers.Bitwarden9 actionsBitwarden is a password manager with encrypted vaults, used by organizations to store and share credentials securely and manage which members and groups can access them.SSLMate Cert Spotter API9 actionsCert Spotter watches Certificate Transparency logs for a company's domains and flags any TLS certificate issued for them, including ones no one authorized.Firebase8 actionsFirebase Authentication handles sign-in and sign-up flows for apps, including password, email link, and identity provider logins, used by developers building user accounts into mobile and web apps.FraudLabs Pro8 actionsFraudLabs Pro is an online payment fraud detection service that screens orders to help merchants reduce chargebacks, used by ecommerce stores protecting themselves from fraudulent orders.Memberstack8 actionsMemberstack adds user authentication, payments, and member management to websites without requiring developers to write custom backend authentication code from scratch.IBM X-Force Exchange7 actionsIBM X-Force Exchange is a threat intelligence sharing platform for researching security threats and aggregating intelligence. Security teams fold it into their existing checks rather than relying on it alone.Malwarebytes6 actionsMalwarebytes provides threat intelligence lookups that check links, emails, phone numbers, and domains for known malicious activity before they reach a user.Authyo5 actionsAuthyo handles passwordless login, OTP verification, and session management for other apps, giving support and engineering teams a way to verify users and manage active sessions.Signpath5 actionsSignPath is a code signing service that plugs into a build pipeline to automatically sign software artifacts. Development teams use it to keep releases authenticated and tamper-evident.Ip2Whois2 actionsIP2WHOIS returns domain registration details like creation date, registrant, and nameservers from a WHOIS lookup. Security teams fold it into their existing checks rather than relying on it alone.JumpCloud2 actionsJumpCloud is a cloud directory platform for identity, access, and device management across an organization. Security teams fold it into their existing checks rather than relying on it alone.Ip2Proxy1 actionsIP2Proxy detects anonymous proxies, VPNs, and TOR exit nodes by IP address, helping flag suspicious traffic. Security teams fold it into their existing checks rather than relying on it alone.
Get started

One plug for every app on this page.

Your users connect once, under your brand. Any agent can act, limited to what each user approved, with every action on the record.