"A list of all remote servers" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
External checks of TLS, HTTP headers, email domain, DNS and ports, with cause and fix
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
Production-safety audits for AI-generated code, with a fix for every finding.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Argues against a security finding or a draft bug bounty report before you submit it.
Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Quick HTTPS/SSL check of any website, cybersecurity glossary and KrakenShield prices.
Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
Check a live app you own for public databases, leaked keys and exposed files.
Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.
