"A tool for file search and web searching" matching MCP connectors:
GET /v1/connectors — MCP directory API referenceMatching Connector Tools:
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
A skeptical senior-engineer code reviewer over MCP: risk-scans unified diffs, flags AI-generated-code tells, reports complexity hotspots, scans for leaked secrets, and runs an OWASP security pass — real analyzers, no external APIs. Free tier, no signup.
Offline methodology engine for authorized penetration testing, CTF, and security research.
urlscan.io URL scanner — search/result keyless, submit needs key
Scan agent skills and MCP servers for malicious patterns before you load them
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Check if an MCP server tool changed or hides injection patterns before you trust it.
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and
ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).