"A server for finding information about Checkmarx application security testing software" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Passive website security checks, credit balance, card top-up links and published app status.
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
Test your AI agents for security and safety weaknesses, and re-verify the fixes.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Scan a website's HTTP security headers (HSTS, CSP, framing, COOP/CORP, cookies). Score + fixes.
Parallel-burst abuse testing for agent APIs with replayable evidence packs.
Production-safety audits for AI-generated code, with a fix for every finding.
Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.
Measured sandbox verdicts: 7-axis probe, signed pinned receipt. Cached $0.25, fresh $2.50.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
