"AURA API documentation and integration guide" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
External checks of TLS, HTTP headers, email domain, DNS and ports, with cause and fix
Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
Free website privacy scanner for pre-consent cookies, trackers, consent, policy, and HTTPS/TLS.
Authorized security scans, evidence, fix prompts and retests for AI-built web apps.
Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.
Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.
Production-safety audits for AI-generated code, with a fix for every finding.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Score any public site's HTTPS, TLS certificate and security headers, with plain fixes. No auth.
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Argues against a security finding or a draft bug bounty report before you submit it.