"Alibaba.com" matching MCP connectors:
GET /v1/connectors – MCP directory API reference30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
Real-time token contract safety scanner and honeypot auditor via x402 on Base.
Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.
Smart-contract security audits for EVM chains and DAML: quote, run and fetch reports.
Production-safety audits for AI-generated code, with a fix for every finding.
Free email checks: 24 blacklists, spoofing/BEC grade, redirect tracing, email spam test, WHOIS.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
Argues against a security finding or a draft bug bounty report before you submit it.
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Solve reCAPTCHA image grids, text captchas, GeeTest and FunCAPTCHA for AI agents. Free tier.
MCP server for the Vulners.com API
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
Offline methodology engine for authorized penetration testing, CTF, and security research.
Checks HTTP response headers you paste: 7 security checks with copy-paste fixes. No fetching.
Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
50-vector prompt-injection, llms.txt poisoning, SSRF & OpenAPI scanner ($1 USDC).
