"All MCP servers available on the site" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Live security incidents, updated hourly from CISA KEV, critical GitHub security advisories, CVE records, vendor advisories and security news. For each one: what's affected, whether a fix exists, which versions fix it, and the sources. Check a lockfile or a whole repo and get the exact upgrade. Lockfiles are read in memory and never stored. Read-only MCP server, no auth
Real-time token contract safety scanner and honeypot auditor via x402 on Base.
Scan text, web pages and MCP tool descriptions for prompt injection and tool poisoning before your agent trusts them. Free preview and MCP tool scan_text; full scans via x402 at $0.003 USDC on Base.
Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F: score, present and missing headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy), per-header findings with copy-paste fix values, and cookie flag issues. Passive, SSRF-guarded. Pay-per-call via x402 ($0.01 USDC on Base); initialize and tools/list are free.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Test your AI agents for security and safety weaknesses, and re-verify the fixes.
Security scans for AI-built web apps, starting with Lovable. Verify ownership, run authorized scans, inspect findings, get AI-ready fix prompts and request retests. Uses OAuth with a Guarita account. Fix prompt access follows the account plan.
Tells your coding agent whether your installed packages need patching, with advice on what to do.
Free HTTPS and security header check from Corrie, uptime monitoring for small teams. No auth.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
Scan text, web pages and MCP tool definitions for prompt injection before your agent reads them. Risk score, verdict, exact spans. Free MCP tool; paid calls use x402 USDC on Base. Built by Crypto Money Maker. https://youraitools.co/guides
Run real, auto-recovered cloud attacks on AWS, Azure and GCP to test your defenses.
Solidity vulnerability scan (Slither) for AI agents. Free preview; full report 1 USDC on Solana x402
PQ TLS + cert checks; Wazuh rules tested on a real manager; PHP2Shell CVE check + fix steps
MCP server for the Vulners.com API
Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and
Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).
MDN HTTP Observatory — grade any website's HTTP security headers and get the specific fixes, from…
Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.
Discover a site's pages from its sitemap and sample them for WCAG and prompt-injection risk.
Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Look up hosts in the Ohey web malware feed, read CVEs and scan URLs with Ohey's scanner.
Checks a site built with AI tools for security problems and gives the fix in plain English.
Email OSINT Tool - Find Registered Accounts on 120+ Sites
Scan MCP servers for tool poisoning, hidden instructions and silent tool changes. Runs on Apify.
Outside-in audit of a live site: leaked keys, headers, TLS, SPF/DMARC, privacy, SEO, with fixes
Founders' AI CSO: vulnerabilities, dependencies, secrets, verified-site checks, threat model, fixes.
