Tools agents can use.

Blockchain data (historical SQL over 150+ chains, realtime prices, balances, transactions and PnL, Hyperliquid) for institutions and, per the vendor, for AI agents. Three documented agent paths: a hosted MCP server (OAuth sign-in or an API key from a free account), REST APIs keyed from the same account, and a machine-payments host, agents.allium.so, where every priced endpoint is paid per call with no API key, registration or subscription; an agent skill package and a CLI drive the paid path.

No account needed

An all-in-one recruiting platform: applicant tracking, sourcing CRM, interview scheduling and analytics, with AI features across it. AI-Assisted Application Review evaluates each active application against criteria an admin writes per job and shows its reasoning criterion by criterion; Ashby Assistant and custom agents read and take a short list of actions inside the product under the user's own permissions. For outside clients the vendor runs a first-party MCP server in open beta at mcp.ashbyhq.com/mcp/v1, per-user OAuth, which answered 401 to a probe with no credentials.

Account required

The Astro project's hosted MCP server for its own documentation: one tool, search_astro_docs, that takes a natural-language query and returns documentation passages with their page URLs. The vendor's guide calls it free, open-source and remote with nothing to install; the server answers an anonymous caller without any key, session or challenge, because the deployment holds the kapa.ai key that builds the index. Streamable HTTP only; SSE-only clients need a local proxy, by the vendor's own note.

No account needed

Jira, Jira Service Management, Confluence, Bitbucket and Compass, with Rovo as the AI layer. JSM documents two distinct AI products: the virtual service agent, which runs conversation flows and escalates by design, and Request Resolver (formerly Rovo Service), whose autonomous mode assigns itself a work item and starts working immediately. For agents, the vendor publishes the Rovo MCP Server at mcp.atlassian.com/v2/mcp, reading and writing across those products plus Loom, Teams, Goals and Projects; OAuth 2.1, or an API token where an admin enables it; measured 401 with no credentials.

Account required

A managed remote MCP server from AWS that searches and reads AWS documentation, API references, What's New posts, Well-Architected guidance, CDK and CloudFormation references, regional availability data and AWS agent skills. The vendor says it needs no AWS account and no authentication, at no cost, under rate limits; measured true for initialize, tools/list and each of the five tools, one keyless call apiece.

No account needed

AWS's managed remote MCP server for coding agents, the successor the vendor recommends over the AWS API MCP Server and the AWS Knowledge MCP Server. Eight tools: AWS API calls through sandboxed Python, pre-signed S3 URLs, task polling, documentation search and read, agent skills, and region data. The vendor documents two authentication methods, OAuth or SigV4, and says documentation search and skill discovery no longer need credentials; measured keyless, initialize, tools/list and two tool calls answered 200, and the advertised tool list is the full eight.

No account needed

Gift cards, mobile top-ups, eSIMs and some bill payments in 170+ countries, bought with cryptocurrency (Bitcoin, Lightning, USDC, USDT and others) or a pre-funded balance. Four documented agent paths: a hosted eCommerce MCP server (OAuth sign-in or an API key from an account), a REST API (Personal key, or Business Basic auth by application), an agent skill package with a CLI, and an x402 storefront at api.bitrefill.com/x402 that needs no Bitrefill account: browse for USDC micro-fees per call, or sign in once with a wallet signature (SIWX) and browse free, then pay each invoice in USDC.

No account needed

Cloudflare's catalog of managed remote MCP servers: the Cloudflare API server (2,500+ endpoints behind search and execute tools), fifteen product-specific servers on *.mcp.cloudflare.com (bindings, builds, observability, Radar, browser rendering, logs, AI Gateway, DNS analytics and more), and an Agents SDK Documentation server on agents.cloudflare.com. Two need no authentication, both measured: the Documentation server at docs.mcp.cloudflare.com and the Agents SDK one; the rest require OAuth or a token (two measured 401). Code: mcp-server-cloudflare Apache-2.0, the Agents SDK server MIT.

No account needed

Cryptocurrency market data (prices, market caps, volumes, OHLCV, onchain DEX pools and tokens) over a REST API, hosted MCP servers, an SDK and an agent SKILL package. Three ways in for an agent, all documented by the vendor: a keyless public tier with no sign-up at a low IP-shared rate limit, keyed plans (a free Demo key and paid tiers) and an experimental x402 pay-per-use path at $0.01 USDC per request with no key or account at all.

No account needed

Up-to-date, version-specific documentation and code examples for software libraries, served to coding agents through a REST API, a hosted MCP server and a CLI. Search and docs calls answer with no account at a quota the server names in a header.

No account needed

A/B, split-URL, multivariate and personalization testing for websites (a tracking script and visual editor) and Full Stack SDKs with feature flags, aimed at mid-market e-commerce and CRO agencies. For agents: a hosted MCP server of 45 tools that signs in by Convert OAuth, a 16-tool local npm MCP server keyed by an Application ID and Secret Key, and a REST API v2 with the same keys. Every surface needs an account first; plans start at $299 per month after a 15-day free trial that needs no credit card.

Account required

Observability and security monitoring (infrastructure, APM, logs, monitors, incidents), with Bits Investigation (until recently Bits AI SRE), the vendor's on-call agent that investigates every alert as it fires and reports a root cause with a verifiable investigation. For agents it publishes a hosted MCP server over its observability data (logs, metrics, traces, dashboards, monitors, incidents) that authenticates by OAuth 2.0 by default, or by API and application keys for servers and CI; measured 401 with no credentials and no challenge header.

Account required

AI-generated documentation for public GitHub repositories, with a hosted MCP server that lists a repository's topics, returns its documentation and answers questions about it. The vendor calls the MCP server free and no-authentication-required.

No account needed

Electronic signature and agreement management. Its first-party MCP server, in open beta, exposes 24 tools (22 over envelopes, recipients, templates, users and Maestro workflows, plus two read-only "skill" tools that instruct the calling model): create an envelope, set signers and their routing order, read envelope and recipient status, remind pending signers, and void. The tool catalog is published without credentials at mcp.docusign.com/tools; the endpoint itself answered 403 to a probe with no token, and the vendor accepts only Confidential Authorization Code Grant tokens.

Account required

Exa's hosted MCP server for its web search index: web search and page fetching for any MCP client, with a documented keyless mode ('Free rate-limited usage without sign-in or API key'), an opt-in advanced search, and an agent_run tool for multi-step research, list-building and enrichment that needs OAuth or an API key. Measured keyless on 2026-10-03: two default tools listed and both answered with content; naming agent_run in the URL turns the handshake into a 401.

No account needed

Web scraping, crawling and search for agents: any URL to clean Markdown or schema-shaped JSON, plus a web search with a developer-documentation category, through a REST API, SDKs, a CLI and a hosted MCP server. The vendor documents a keyless tier for search, scrape and parse, capped per IP per day; two measurements from a datacenter were refused.

Account required

Supply chain visibility and execution platform. The vendor operates six named AI agents it calls a Digital Workforce (Tracy, Sam, Alan, Cassie, Polly, Sophie) on an orchestration layer called Loft: they chase carriers on late shipments, parse supplier documents, book dock appointments, answer customer status inquiries and collect delivery documents. The agents act for the customer inside the platform; they are not a surface another agent can call, and the API documentation sits behind a login, so no endpoint, credential type or schema is readable without an account.

Account required

Code hosting with pull requests, issues, Actions and the Copilot agents: Copilot code review, which reviews a pull request's full changeset and comments on the lines that need attention, and Copilot cloud agent, which takes a task from an issue or a prompt, makes the changes in its own GitHub Actions environment and opens a pull request. For agents, the vendor publishes a GitHub MCP server, 92 tools in 22 categories open source plus 4 more on the hosted endpoint; it authenticates by OAuth or a personal access token, measured 401 without one.

Account required

Grafana Labs' hosted MCP server for Grafana Cloud: external AI agents connect at mcp.grafana.com/mcp over Streamable HTTP and, after an OAuth 2.1 browser authorization scoped to the signed-in user, query metrics, logs, traces and profiles, read and write dashboards, alerts and incidents, and start Assistant investigations. Measured keyless on 2026-10-05: initialize, an empty POST and a GET each answered 401 with a bearer challenge; the discovery documents behind it are public and name three scopes. Part of Grafana Assistant for billing; a Grafana Cloud account is required.

Account required

Feature flagging and experimentation platform (A/B tests through feature flags, a visual editor, URL redirects or the SDKs, with Bayesian and frequentist analysis over the customer's own warehouse), sold as a hosted cloud with a self-hostable open-source core. For agents: a hosted MCP server that signs in by OAuth and a REST API keyed by a secret the account holder creates. Every surface needs an account first.

Account required

A paid batch report for 1–5 public EVM addresses across Ethereum, Base, Arbitrum One and Polygon. A keyless JSON API, MCP server and A2A agent expose the report workflow. One batch costs 0.02 USDC on Ethereum, Base, Arbitrum One or Polygon; 0.02 USDT on Ethereum; or 0.02 Binance-Peg BSC-USD on BNB Smart Chain. The payer's owner-authorized wallet pays and signs a message binding the payment to the address batch. Reports do not establish ownership, malicious intent or recovery authority.

No account needed

CRM and marketing, sales, service and content software with Breeze, the vendor's AI: customer agent, which answers questions and resolves tickets automatically and transfers a conversation to a person when it judges one is needed, and prospecting agent, which researches accounts and drafts outreach for a rep to approve. For agents, the vendor publishes a remote MCP server at mcp.hubspot.com with documented read and write access to CRM records, activities, content and conversations, authorized by OAuth with PKCE through an MCP auth app in the account; measured 401 with no credentials.

Account required

Hugging Face's hosted MCP server for the Hub: search models, datasets, Spaces, papers, collections and the documentation, read repository files, and run community Gradio Spaces as tools. The vendor's setup page assumes a logged-in user; the server itself answers an anonymous caller with a four-tool read-only set and says so in its own instructions. The account tools (contribute repos, sandboxes, jobs) are switched on from the user's settings page.

No account needed

Customer service platform, acquired by Salesforce on 2026-09-10; the published terms still name Intercom, Inc. as the contracting party. Fin is the vendor's AI customer agent, which resolves customer conversations without a person and reports a resolution rate. For agents, a hosted MCP server at mcp.intercom.com (US) and mcp.eu.intercom.com (EU) over the workspace's data, authorized by OAuth, and a Fin Agent API by which another agent calls Fin to answer, run a procedure or escalate; access to that API is by request. Measured: MCP initialize and the REST API answer 401 with no credentials.

Account required

Contract lifecycle management for legal teams. Its agentic product is Jurist, which the vendor says redlines a whole contract against the organization's playbook, on third-party paper, as a first pass before a lawyer reads it; Ironclad AI separately extracts properties, clauses and obligations from uploaded contracts. For agents it publishes a first-party MCP server, one URL per region, with a read-only conversational search over contracts and create/read/update tools for obligations; a user connects it by OAuth, and it answered 401 to a probe with no credentials.

Account required

Issue tracking and project planning for product teams, with Triage Intelligence, the vendor's LLM step that analyzes every new issue in a team's triage inbox against existing issues to suggest assignee and labels and surface likely duplicates. For agents it publishes a hosted MCP server that finds, creates and updates issues, projects and comments, connecting to a Linear workspace by OAuth 2.1 by default or with an API key or OAuth token as a bearer; measured 401 with an OAuth challenge and no credentials.

Account required

Adaptive A/B testing where the whole test lives in a URL: traffic shifts toward the winner while the test runs, and no account is needed to create one.

No account needed

A remote MCP server that searches official Microsoft and Azure documentation, fetches an article as markdown and searches code samples. The vendor says it needs no authentication, costs nothing and is generally available. A second documented endpoint, /api/mcp/openai-compatible, serves the same knowledge service under two differently named tools.

No account needed

The write-capable one of Mintlify's three MCP servers: one hosted endpoint every customer connects to, authenticating with a Mintlify account, documented to edit pages, restructure navigation, open pull requests and change project settings. Measured keyless on 2026-10-07, one request per probe record: initialize, tools/list and a plain GET each answered 401 with the same 85-byte body and the same Bearer challenge, while the whole OAuth discovery chain answered 200 keyless and enumerates thirteen scopes of which eight write. The tool list is not readable without an account.

Account required

Mintlify generates and hosts a search MCP server for every documentation site on its platform, at the /mcp path of that site's URL, and advertises it in four auto-generated discovery documents. Measured keyless on 2026-10-07, one request per probe record: initialize, tools/list, resources/list, a search and a filesystem ls each answered 200 with no account, the search returning ten source-cited passages in 1.04 s. Three tools, one of them not read-only and absent from the server cards. Every discovery document read names a mintlify.me hostname rather than the domain serving it.

No account needed

One public MCP endpoint Mintlify runs for every caller, reading across the documentation it hosts and the open web. Measured keyless on 2026-10-07, one request per probe record: initialize, tools/list, resources/list and three tool calls answered with no account and no session id. Exactly one tool, context, read-only, whose description promises primary-source citations. On three questions about a project whose documentation Mintlify generates on its own mintlify.wiki domain it never cited the project's own site; on two about one it does not, it cited the vendor's domain.

No account needed

A workspace for documents, wikis, databases and projects, with Notion AI. Enterprise Search, a feature of Notion AI on the Business and Enterprise plans, answers questions from the workspace and connected apps (Slack, Google Drive, Jira and others) and cites its sources. For agents it publishes a hosted MCP server (search, read, create and update content, pages and databases) that connects to a Notion workspace by OAuth only, with no non-interactive authorization yet; measured 401 with an OAuth challenge and no credentials.

Account required

Last-mile delivery management platform with a documented Route Optimization API: a caller schedules an optimization over tasks and teams, starts the engine, polls status and applies the result. The optimization endpoint takes a required maximum allowed delay and an objective mode (minimize distance, always on time, or balance the two), and the v3 engine takes a published per-parameter cost model instead. This version claims `scm.optimize-delivery-routes` on those parameters. The optimization endpoints are Enterprise-plan only.

Account required

Web Experimentation and Feature Experimentation, the A/B, multivariate and feature-flag testing products of the Optimizely One digital experience platform, with a proprietary stats engine. For agents: a hosted Experimentation MCP server that signs in by OAuth through an Opti ID account with Opal enabled, and a REST API (v2) that takes a personal token or OAuth 2.0. Every surface needs an account first; plans are individually packaged, not self-serve.

Account required

Product analytics platform (events, session replay, feature flags, experiments, error tracking, surveys, data warehouse) with a hosted MCP server and a REST API through which an agent can create, launch and read A/B experiments. The MCP tools reference listed 966 tools in 72 categories on 2026-09-16, and the vendor ships a single-tool CLI mode, a read-only switch and category filters for that reason. Every surface needs a PostHog account first; the free tier needs no card.

Account required

Supply chain visibility, transportation management and yard platform, sold as Movement. The vendor publishes a portfolio of AI agents for freight procurement, disruption management, network operations, exception management, slot booking and carrier onboarding, plus a conversational analyst called Mo, all operating inside its own platform. Its REST API is documented publicly, with a complete OpenAPI description readable without an account, and authorized by an OAuth 2.0 client-credentials machine user.

Account required

An all-in-one workforce platform (HR, payroll, IT, spend) on one employee record. Rippling AI answers questions and runs tasks over that record; for outside clients the vendor runs a first-party MCP server governed by an MCP Gateway, exposing a single code tool whose typed functions include ask_ai, people and org lookups, time-off balances and requests, draft hires and custom objects. Writes enter the product's normal approval flows and a hire creates a draft for human review. Account-bound: it answered 401 to a probe with no credentials, and tool calls need an active Rippling AI subscription.

Account required

Fleet operations platform: vehicle gateways, dash cams, GPS tracking, compliance, and a route planning and dispatch product. Its REST API models the planning loop an outside system can drive (create a plan, bulk-upsert orders with appointment windows, read back the routes the planner produced) and emits route-stop ETA and early/late arrival webhooks in beta. One scm job is claimed; route optimization is deliberately NOT claimed, and the profile says which sentence the vendor would have to publish for it to be.

Account required

Semgrep's plugin for AI coding agents: an MCP server, hooks and skills that scan each file an agent writes with Semgrep Code, Supply Chain and Secrets and hand the findings back to the agent. The recommended path is a hosted MCP server behind OAuth; every other path runs a locally installed, signed-in Semgrep CLI. Measured keyless on 2026-10-05: every request to the hosted server answered 401 with a bearer challenge; the discovery documents behind it are public and the plugin's fixed ruleset is readable without a login.

Account required

Error and performance monitoring for applications, with Seer, the vendor's AI debugging agent, which analyzes issues to a root cause and proposes fixes. For agents it publishes a hosted MCP server (searching errors, analyzing performance, triaging issues, reading documentation, managing projects) that connects to a Sentry account, by OAuth by default or with a user token; measured 401 with an OAuth challenge and no credentials.

Account required

Shopify's documented path for AI agents to buy on a person's behalf: UCP-compliant MCP servers for catalog search across every Shopify merchant, carts and checkouts at each merchant's own endpoint, and orders, plus a UCP CLI and an AI Toolkit skill. Three access tiers in the vendor's words: Token (a Dev Dashboard credential), Signed (RFC 9421 signatures) and Anonymous (nothing). Catalog search needs no account (measured). Measured 2026-09-20 at one merchant: of 13 tools only complete_checkout and get_order refuse an anonymous caller; no valid checkout was attempted.

No account needed

Experimentation, feature flag, product analytics and session replay platform. For agents: a hosted MCP server over the Console API (OAuth or a Console API key) that creates, updates and reads experiments and their results, a REST Console API with a published OpenAPI document, and a separate keyless MCP server for the vendor's documentation, which the vendor's page calls read-only and lists as three tools where a keyless tools/list returns five, one of them a feedback write path (not exercised). Doing the job needs an account; reading the docs does not.

Account required

Payments infrastructure: card and bank payments, Billing, Invoicing, Connect for platforms, Issuing, Tax, and Radar, the vendor's fraud product that blocks fraudulent payments and flags suspicious accounts in real time. For agents, the vendor publishes a hosted MCP server at mcp.stripe.com that searches the API and its knowledge base and reads and writes much of the Stripe API; it authenticates by OAuth, or by an agent API key, a tagged restricted key, as a bearer token where a client cannot do OAuth; measured 401 with no credentials.

Account required

Enterprise supply chain planning software, sold as SO99+, JustEnough and a platform the vendor calls Decion. It claims probabilistic demand forecasting with a full probability distribution for every SKU-location, multi-echelon inventory optimization against per-class service targets, and replenishment that recommends when, where and how much to reorder. Two scm planning jobs are claimed from the vendor's own pages, element by element in the profile; nothing is measured and no vendor number enters a machine-readable field.

Account required

Vercel's official remote MCP server at mcp.vercel.com. The vendor lists searching Vercel documentation, managing projects and deployments, analysing logs, querying Web Analytics, and Purchase tools that buy Pro, prepaid credits, the SIEM add-on and domains on a team's behalf, charged to the team's payment method. Keyless, dated: initialize 401 on 09-12 and 09-17; tools/list and a documentation-tool call 401 on 09-21; all three 200 on 2026-09-25 from two containers; all three 401 with a Bearer challenge on 09-26. Account and purchase tools: OAuth per the server, unmeasured.

Account required

Zapier's hosted MCP server, which the vendor describes as letting an AI client 'take real action in the apps that run your business'. Measured keyless 2026-10-08 at 12:19Z, one request per record: it refuses before it says hello, answering initialize, tools/list and a plain GET each with 401 and the same 108-byte JSON-RPC error. The tool list, every schema and what any scope permits are empty cells here. Its OAuth discovery is public and broken at the step RFC 9728 defines: the challenge carries no resource_metadata and only the path-inserted document answers.

Account required

Customer service platform (ticketing, messaging, voice, help center) with Zendesk AI: AI agents that resolve customer requests across channels without a person, Copilot for human agents, and AutoQA, which scores every interaction. For agents calling in, the vendor publishes the REST API (OAuth access tokens; API tokens deprecated) and an AI Agents API keyed per organization, and documents no MCP server. Measured 2026-10-11: every *.zendesk.com host answers /api/mcp with an OAuth challenge and advertises dynamic client registration, undocumented. The API answers an anonymous end user.

Account required