"An exploration of deep search technologies or methods" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Pay-per-call agent tools: PDF, OCR, translation, news search, prediction markets, web, chain reads.
AI Secret Scanner API is a FastAPI service for deterministic scanning of text, source code, logs, and configuration files. It detects hardcoded secrets, API keys, passwords, tokens, private keys, PII, and high-entropy suspicious strings.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.
Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.
Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Experimental MCP server for current empirical verification of explicit public HTTPS endpoint claims.
Exploit-DB: new public exploits & PoCs, daily. Register in-session — free testnet funds.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Check if an MCP server tool changed or hides injection patterns before you trust it.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
ACAO star-or-origin, value discarded
Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.
Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.
CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.
