"A system or program using SSE instead of STDIO" matching MCP connectors:

Free lockfile malware check plus paid pre-install scan of any skill, tool, or package.

Check if an MCP server tool changed or hides injection patterns before you trust it.

Query 90 days of honeypot probe data: IP reputation, scanners, CVE probing, TLS/SSH fingerprints.

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.

Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

Scan your home network and local machine for security risks, open ports, weak Wi-Fi, unknown devices. Providing with a trust score and clear explanations.

AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals.

Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day

Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.

Browser QA agent that won't return a false green: verified PASS/FAIL + access-control probing.

A paid remote MCP for developer endpoint scanner MCP, built to return verdicts, receipts, usage logs