"API Labs MCP server" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
External checks of TLS, HTTP, email domain, DNS, ports, blocklists and domain expiry
Check dependencies for known CVEs with EPSS and CISA KEV context. Read-only; free API token.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Production-safety audits for AI-generated code, with a fix for every finding.
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Free CVE lookup, dependency vulnerability checks, and CVE updates. No signup or API key.
Argues against a security finding or a draft bug bounty report before you submit it.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Autonomous AppSec & DAST scanner across 12 security domains (260+ controls) with 3-Layer Triage.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
PCI ASV scan prices, SAQ check, free payment page check, PCI guides and scan-failure fixes.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides
Audit any live URL: 85 SEO, AI-search, security, leaked-key and speed checks, with fixes to verify.
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
Solve reCAPTCHA image grids, text captchas, GeeTest and FunCAPTCHA for AI agents. Free tier.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
MCP server for the Vulners.com API
PHP2Shell (CVE-2026-109618) scanner and automated WordPress to Zero-PHP Next.js migration.
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
Quick HTTPS/SSL check of any website, cybersecurity glossary and KrakenShield prices.
50-vector prompt-injection, llms.txt poisoning, SSRF & OpenAPI scanner ($1 USDC).
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
WHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.
