"An overview or resources about Node.js" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.
Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.
Security reviews, threat models over a repo or website, and remediation tracking, in your editor.
Grades an MCP server's real egress: EVERY-HOP-VALIDATED, FIRST-HOP-ONLY, or OPEN-EGRESS.
Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).
Argues against a security finding or a draft bug bounty report before you submit it.
PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.
Security tools for coding agents, with dependency advisory audits and structured remediation evidence. Free advisory intelligence is available; optional hosted security tools require an Offense API key and prepaid credit.
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Read-only agent-commerce audit, upgrade verification, diagnosis and x402 probing.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
ACAO star-or-origin, value discarded
Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.
Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Scan a page for content planted to hijack an AI browsing/shopping agent before it acts on the page.
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
