"A service to convert text to ready-to-use audio with download, player, or embed options" matching MCP connectors:

Free lockfile malware check plus paid pre-install scan of any skill, tool, or package.

Check if an MCP server tool changed or hides injection patterns before you trust it.

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.

No-account public website privacy risk scans with 20 new scans/day and free recent-result reuse.

Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and

Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

Scan your home network and local machine for security risks, open ports, weak Wi-Fi, unknown devices. Providing with a trust score and clear explanations.

IaC attack-path auditor: finds internet-to-crown-jewel chains in Terraform/CFN/K8s.

Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day

Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai

Browser QA agent that won't return a false green: verified PASS/FAIL + access-control probing.

A paid remote MCP for developer endpoint scanner MCP, built to return verdicts, receipts, usage logs