Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

AIPayGen Site Intel

Website and company intel for agents: DNS, WHOIS, SSL, tech stack, email security, profilesThe vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 377 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://mcp.aipaygen.com/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 2.1.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Note: 1 tool is labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • create_api_key
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 16 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (16)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • search_marketplaceSearch 11,000+ AI-agent resources: AIPayGen's paid tools, 4,300+ third-party APIs (with docs and auth info, some x402-payable), 4,300+ reusable skills, 950+ registered agents and 1,500+ agent service…Read-only
  • register_agentFree. Submit your public A2A agent card URL (usually https://<your-domain>/.well-known/agent-card.json) and your agent is listed and searchable in the AIPayGen marketplace, so other agents can find y…Read-only
  • run_skillRun any of 3,900+ ready-made AI skills from the AIPayGen marketplace on your input: research, code review, market analysis, writing, extraction, summarizing and more. Find skill ids with search_marke…Read-only
  • dns_lookupResolve DNS records for a domain (A, AAAA, CNAME, MX, NS, TXT, SOA, CAA) and identify its DNS host and email provider. Pay per call; ask the pricing tool for a quote.Read-only
  • security_headersGrade a website's HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy and more) A-F, list what is missing, and flag exposed server version info. Pay per call; ask the pricing tool for…Read-only
  • domain_whoisLook up who registered a domain and when: registrar, creation and expiry dates, domain age, status codes, nameservers and DNSSEC, via RDAP (the modern WHOIS). Pay per call; ask the pricing tool for a…Read-only
  • email_securityAudit a domain's email security: SPF, DMARC policy, DKIM keys, MX/email provider, MTA-STS, TLS-RPT and BIMI, with an A-F grade, a spoofability verdict and plain-English issues. Pay per call; ask the…Read-only
  • site_metadataExtract a website's title, description, language, social profiles, public contact emails and phones, key pages (contact, pricing, careers, docs), RSS feeds and schema.org organization data. Pay per c…Read-only
  • page_to_markdownFetch a web page and return its main content as clean Markdown (navigation, ads, scripts and cookie banners removed), ready for an LLM to read. Pay per call; ask the pricing tool for a quote.Read-only
  • ssl_certificatesCheck a domain's TLS certificates from Certificate Transparency logs: current certificate, issuer, days until expiry, and every subdomain that has appeared on a certificate. Pay per call; ask the pri…Read-only
  • tech_stackDetect what a website is built with: framework, CMS or site builder, hosting/CDN, web server, analytics, ad pixels, payments, chat, auth and more (90+ technologies), with the evidence for each. Pay p…Read-only
  • company_profileBuild a company profile from just a domain: name, description, logo, location, social profiles, public contact info, domain age, email and hosting providers, key tech stack, and business signals (tak…Read-only
  • domain_reportEverything about a domain in one call: DNS, registration, certificates and subdomains, email security grade, HTTP security headers grade, tech stack and website metadata, plus an overall summary. Pay…Read-only
  • pricingList every tool with its price per call and the accepted payment methods. Free.Read-only
  • create_api_keyCreate an AIPayGen API key with $0.05 of free trial credits. Free. Store the key: it is shown only once.Can change things
  • account_balanceShow the remaining credit balance of the API key sent with this request. Free.Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200377 ms
initializedHTTP 202386 ms
tools/listHTTP 20054 ms
prompts/listHTTP 20066 ms
unknown-methodHTTP 20054 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.